- Best Computer For Server
- Best Minecraft Server Download
- Best Servers To Hack On
- Best Download Server For Steam
THE INTROVISION BROADBAND INTERNET. Address 57/1 North Mugda Zhilpar, Dhaka-1214. Hours Saturday–Thursday: 10:00AM–8:00PM Friday: 03:00PM–8:00PM. The Microsoft Evaluation Center brings you full-featured Microsoft product evaluation software available for download or trial on Microsoft Azure. Evprod-app-1: RD00155DE8A476. Get Ubuntu Server one of three ways; by using Multipass on your desktop, using MAAS to provision machines in your data centre or installing it directly on a server.
This article suggests best practices that can help you avoid configurations that experience poor performance because of design or configuration limitations in Windows Server Update Services (WSUS).
Original product version: Configuration Manager (current branch), Windows Server Update Services
Original KB number: 4490414
Capacity limits
Although WSUS can support 100,000 clients per server (150,000 clients when you use Configuration Manager), we don't recommend approaching this limit. Instead, consider using a configuration of 2-4 servers sharing the same SQL server database.
This is because you have safety in numbers. That is, if one server goes down, although important, it won't immediately spoil your weekend because no client can update, and you have to be updated against the latest 0-day exploit.
The shared database scenario also prevents what we call a scan storm.
A scan storm can occur when many clients change WSUS servers and the servers don't share a database. WSUS tracks activity in the database so that both know what has changed since a client last scanned and will only send metadata that is updated since then.
If clients change to a different WSUS server that uses a different database, the client will have to do a full scan. This can result in large metadata transfers. We have seen transfers of greater than 1 GB per client occur in these scenarios, especially if the WSUS server isn't maintained correctly.
This can generate enough load to cause errors when clients communicate with a WSUS instance. This results in clients retrying repeatedly.
Sharing a database means that if a client switches to another WSUS instance that uses the same DB, the scan penalty isn't incurred. The load increases aren't the large penalty you pay for switching databases.
Configuration Manager client scans put more demand on WSUS than the stand-alone Automatic Updates. Configuration Manager, because it includes compliance checking, requests scans with criteria that will return all updates that are in any status except declined.
When the Automatic Updates Agent scans, or you click Check for Updates in Control Panel, the agent sends criteria to retrieve only those updates Approved for Install. Therefore, the metadata returned will usually be less than when the scan is initiated by Configuration Manager. The Update Agent does cache the data and the next scan requests will return the data from the client cache.
Disable recycling and configure memory limits
WSUS implements an internal cache that retrieves the update metadata from the database. Retrieving metadata from the database is expensive and very memory intensive and can result in the IIS application pool that hosts WSUS (known as WSUSPool) recycling when it overruns the default private and virtual memory limits.
Best Computer For Server
When the pool recycles, the cache is removed and must be rebuilt. This isn't a large problem when clients are undergoing delta scans. But if you end up in a scan storm scenario, the pool will recycle constantly, and clients will receive errors when you make scan requests, for example HTTP 503 errors.
We recommend that you increase the default Queue Length, and disable both the Virtual and Private Memory Limit by setting them to 0. IIS implements an automatic recycling of the application pool every 29 hours, Ping, and Idle Time-outs, all which should be disabled. These settings are found in IIS Manager > Application Pools > choose WsusPool and then click the Advanced Settings link in the right side pane of IIS manager.
The following is a summary of recommended changes, and a related screenshot. For more information, see Plan for software updates in Configuration Manager.
Setting name | Value |
---|---|
Queue Length | 2000 (up from default of 1000) |
Idle Time-out (minutes) | 0 (down from the default of 20) |
Ping Enabled | False (from default of True) |
Private Memory Limit (KB) | 0 (unlimited, up from the default of 1,843,200 KB) |
Regular Time Interval (minutes) | 0 (to prevent a recycle, and modified from the default of 1740) |
For reference, in an environment that had around 17,000 updates cached, we have seen greater than 24 GB of memory needed as the cache is built until it stabilized (at around 14 GB).
Check whether compression is enabled (if you want to conserve bandwidth)
WSUS uses a compression type calls Xpress encoding. This implements compression on update metadata. This can result in significant bandwidth savings.
Xpress encoding is enabled in IIS ApplicationHost.config with this line under the element and a registry setting:
ApplicationHost.Config
Registry key
HKEY_LOCAL_MACHINESOFTWAREMicrosoftUpdate ServicesServerSetupIIsDynamicCompression
If both aren't present, it can be enabled by running this command and then restarting the WsusPool application pool in IIS.
Xpress encoding will add some CPU overhead, and can be disabled if bandwidth isn't a concern, but CPU usage is. The following command will turn it off.
Configure products and categories
When you configure WSUS, choose only the products and categories that you plan to deploy. You can always synchronize categories and products that you must have later but adding them when you don't plan to deploy them increases metadata size and overhead on the WSUS servers.
Disable Itanium updates and other unnecessary updates
This shouldn't be an issue for much longer, because Windows Server 2008 R2 was the last version to support Itanium. But it bears mentioning.
Customize and use this script in your environment to decline Itanium architecture updates. The script can also decline updates that contain Preview or Beta in the update title.
This leads to the WSUS console being more responsive, but does not affect the client scan.
Decline superseded updates and run maintenance
One of the most important things that you can do to help WSUS run better. Keeping updates around that are superseded longer than needed (for example, after you're no longer deploying them) is the leading cause of WSUS performance problems. It's ok to keep them around if you're still deploying them. Remove them after you're done with them.
For information about declining superseded updates and other WSUS maintenance items, see the Complete guide to Microsoft WSUS and Configuration Manager SUP maintenance article.
WSUS with SSL setup
By default, WSUS isn't configured to use SSL for client communication. The first post-install step should be to configured SSL on WSUS to make sure security between server-client communications.
You have to create a self-signed certificate (not ideal because every client would have to trust this certificate), obtain one from a third-party certificate provider, or from your internal certificate infrastructure.
Your certificate should have the short server name, FQDN, and SAN names (aliases) that it goes by.
After you have the certificate installed, you have to upgrade the Group Policy (or Client Configuration settings for software updates in Configuration Manager) to use the address and SSL port of the WSUS server. This is typically 8531 or 443.
For example, configure GPO Specify intranet Microsoft update service location to <https://wsus.contoso.com:8531
>.
To get started, see Secure WSUS with the Secure Sockets Layer Protocol.
Configure Antivirus Exclusions
About Cumulative Updates and Monthly Rollups
You may see the terms Monthly Rollups and Cumulative Update used for Windows OS updates. Although we may use them interchangeably, Rollups refer to the set of updates published for Windows 7, Windows 8.1, Windows Server 2008 R2 and Windows Server 2012 R2 that are only partly cumulative.
The following blog posts explain this:
With Windows 10 and Windows Server 2016, the updates were cumulative from the beginning:
Cumulative in this context means, that you install the release version of the OS and only have to apply the latest Cumulative Update in order to be fully patched. For the older operating systems, we don't have such updates yet, although this is the direction we're heading in.
For Windows 7 and Windows 8.1, this means that after you install the latest monthly rollup, additional updates will still be needed. Here is an example for Windows 7 and Windows Server 2008 R2 on what it takes to have an almost fully patched system.
You can find the list of Monthly Rollups for Windows 7 and 8.1 and Cumulative Updates for Windows 10/Server 2016 at these links, or you can find them by searching for Windows X update History, where X is the version.
Windows version | Update |
---|---|
Windows 7 SP1 and Windows Server 2008 R2 SP1 | Windows 7 SP1 and Windows Server 2008 R2 SP1 update history |
Windows 8.1 and Windows Server 2012 R2 | Windows 8.1 and Windows Server 2012 R2 update history |
Windows 10 and Windows Server 2016 | Windows 10 and Windows Server update history |
Windows Server 2019 | Windows 10 and Windows Server 2019 update history |
Another point to consider is that not all updates are published so that they sync automatically to WSUS. For example, C and D week Cumulative Updates are preview updates and won't synchronize to WSUS, but must be manually imported instead. See the Monthly quality updates section of Windows 10 update servicing cadence.
Using PowerShell to connect to a WSUS server
The following is just a code example to get you started with PowerShell and the WSUS API. It can be executed where the WSUS Administration Console is installed.
References
The best download manager software increases file downloading speed much higher than the usual download process. Whether you are using Windows, Linux or Mac OS computers, there are several good alternatives free internet download manager programs available.
What does a download manager do? Generally, internet download managers speed up your downloading process. In addition, best download manager programs have other features like schedule download files, resume failed download or paused downloads, converts, antivirus scan and more.
Internet Download Manager IDM is the most popular and widely used Windows software but If you want to full version of a free download manager, here we list useful alternatives are available for free usage. Let's take a look at some best download manager for Windows, Linux, and Mac.
Best Free Internet Download Manager for Windows 10 and Mac
Best Minecraft Server Download
1. Free Download Manager
Free Download Manager is the most popular windows download manager program. It enables you to download the same file from multiple sources so your files download through the fastest server. Free Download Manager very straightforward and user-friendly interface design free download. software that allows you download video from popular websites.
It supports a range of file formats like HTTP, BitTorrent, MMS, and RTMP. Free Download Manager software supports Mac and Windows 10/8.1/8/7 64-bit. The best thing is one-click downloading of torrents. You can Download for free from the Free Download Manager official website.
2. Ninja Download Manager
Best Servers To Hack On
Ninja Download Manager is another best free download manager for windows 7, 8, 10. It is really fast internet download manager and you are able to change the download speed. Other handy feature, you can automatically scan all download files for viruses and malware using your anti-virus. Free Download, You can schedule downloads, set download priorities and speed limits.
3. JDownloader
JDownloader is a free open-source file downloader management tool. You can use for downloading multiple files from hosting sites. Users can start, stop or pause downloads, set bandwidth limitations, auto-extract archives and much more. JDownloader available for the major operating system such as Windows, Mac, and Linux. You can download for free from the JDownloader official site.
4. Internet Download Manager (IDM)
Internet Download Manager IDM is the best download manager for Windows. It increases download speeds by up to 5 times. IDM download manager has user-friendly and easy to use interface design.
IDM offers a limited time free trial version. Internet Download Manager supports proxy servers, ftp and HTTP protocols, firewalls, redirects, cookies, authorization, MP3 audio and MPEG video content processing. You can try IDM for free.
5. GetGo Download Manager
GetGo Download Manager is a free internet download manager with integrated web video downloader. It features dedicated web browser (GetGo123) that can detect web videos using cloud-based technology for you to download and save to local disk.
This download manager also supports proxy servers, FTP and HTTP protocols, firewalls, redirects, cookies, and authorization. You can download GetGo Download Manager for free from GetGo Soft site.
6. Internet Download Accelerator
Internet Download Accelerator is another free download manager that increase the speed of file download from the Internet using HTTP, HTTPS, and FTP protocols. It is the great alternative for IDM. Internet Download Accelerator integrates all major browsers like Internet Explorer, Chrome, Firefox, Mozilla, Opera, Netscape, Safari, and Yandex.
Best Download Server For Steam
This tool works with ZIP and RAR archives. Internet Download Accelerator provides the free version for non-commercial purposes only. System requirements: Microsoft Windows 10/8/7/Vista/XP/2012/2008/2003/2000/NT
7. Download Accelerator Plus
Download Accelerator Plus is another popular free download manager that will help you download files much faster than usual. It is available for MAC and Microsoft Windows as well. It converts your video files to MP3, MOV, AVI, WAV or any other format. You can easily download videos from YouTube, Metacafe, Dailymotion and other video sites. You can get Download Accelerator Plus for free from Speedbit.
8. Xtreme Download Manager
Xtreme Download Manager is another best download manager software to increase download speed up to 500%, save and convert streaming videos from YouTube, Vimeo, Dailymotion, Google Video and thousands of other websites, resume broken/dead downloads and schedule downloads.
It works with all modern browsers on Windows, Linux and Mac OS X. XDM Download Manager for Chrome, Chromium, Firefox Quantum, Vivaldi, and many other popular browsers. Download
9. EagleGet
EagleGet is a good download manager which specifically designed for Microsoft Windows Operating System. It provides an easy-to-use tool to manage your file downloads and boost the download speed significantly. Download
10. FlashGet
FlashGet is a freeware download manager for Microsoft Windows. Download
11. Free Rapid Downloader
FreeRapid is free software and the source code is open under GNU GPL license. Download for Windows, Linux and Mac OS.
12. Mipony Free Download Manager
Mipony is another free download manager that gives you access to content on a wide variety of sites, so you can save it to your computer or mobile device. Download
Also read: 10 Best Free Music Downloader