locked
web application using different port RRS feed

  • Question

  • can someone explain the benifits of using different port for web applications, instead of using port 80?

    thanks in advance.
    Thursday, September 24, 2009 2:16 PM

Answers

  • In almost every case you'll want to keep the web applications on standard ports.  Some people will want them on different ports because they believe it makes it more secure - that's just nonesense (security through obfuscation is not security - especially something like this).  For every production environment I've ever seen everything goes on port 80 or 443 if using SSL - some people will use non-standard ports for dev or test environments just to avoid the hassle of editing the hosts file or adding DNS entries - this is typically the only time you'll want to do this.  Also, if using Kerberos you'll want to try and stick with standard ports.
    Gary Lapointe, Blog: http://stsadm.blogspot.com/, Twitter: http://twitter.com/glapointe
    Thursday, September 24, 2009 8:14 PM

All replies

  • In almost every case you'll want to keep the web applications on standard ports.  Some people will want them on different ports because they believe it makes it more secure - that's just nonesense (security through obfuscation is not security - especially something like this).  For every production environment I've ever seen everything goes on port 80 or 443 if using SSL - some people will use non-standard ports for dev or test environments just to avoid the hassle of editing the hosts file or adding DNS entries - this is typically the only time you'll want to do this.  Also, if using Kerberos you'll want to try and stick with standard ports.
    Gary Lapointe, Blog: http://stsadm.blogspot.com/, Twitter: http://twitter.com/glapointe
    Thursday, September 24, 2009 8:14 PM
  • uhh, kerberos... good point.

    Besides, would there any performance concern, since all web applications are going through port 80? or this is just another nonesense?

    Thanks
    Thursday, September 24, 2009 10:25 PM
  • There's no performance gain one way or another.
    Gary Lapointe, Blog: http://stsadm.blogspot.com/, Twitter: http://twitter.com/glapointe
    Thursday, September 24, 2009 10:32 PM
  • I hate to be annoying, i just want to make myself clear.

    So, for the MySite, SSP, and all other web applications, i should use port 80, so that users can have a friendly url. And also, for extranet access?

    thanks for millions.

    Friday, September 25, 2009 12:38 AM
  • That's what I would do.  Central Admin would be the only one on a non-standard port though this can be changed but typically people leave it.
    Gary Lapointe, Blog: http://stsadm.blogspot.com/, Twitter: http://twitter.com/glapointe
    Friday, September 25, 2009 12:39 AM