ASP.

NET Core
Architecture overview
David Fowler
Software Architect
What is ASP.NET Core?
• Cross platform web platform from the .NET team
• Similar concepts as previous versions of ASP.NET but not binary
compatible
• Can build a wide range of application types
• REST APIs or gRPC services
• Single Page Applications with Blazor
• Server Rendered web applications with Razor Pages
• Real time web applications with SignalR
ASP.NET Core Design principles
• Various components of the stack should be independently usable
• Only pay for things you that you use
• Performance is paramount
• Code over configuration
• Composition via dependency injection
• Extensibility points used by the framework should be usable by
anyone
• No statics, it should be possible to run multiple applications in the
same process and not conflict.
ASP.NET Core is fast
http://aka.ms/aspnet/benchmarks

M = Million(s) RPS
ASP.NET Core: TechEmpower benchmarks
ASP.NET Core Architecture

WebAPI Razor Pages

MVC SignalR gRPC Blazor Other

Routing

Middleware

Host
The focus of this talk

WebAPI Razor Pages

MVC SignalR gRPC Blazor Other

Routing

Middleware

Host
Overview
1. Application bootstrapping
2. Anatomy of a request
Application Bootstrapping

Host WebHost
• Initialize the dependency injection, • Builds middleware pipeline
logging and configuration systems • Starts the server with the
• Start the IHostedService application
implementations.
• Manages the lifetime of the
application.
Application Bootstrapping: Host

Host WebHost
• Initialize the dependency injection, • Builds middleware pipeline
logging and configuration systems • Starts the server with the
• Start the IHostedService application
implementations.
• Manages the lifetime of the
application.
Host: Microsoft.Extensions.*
• Responsible for bootstrapping the dependency injection, logging and
configuration systems.
• Abstracts how the underlying platform manages lifetime for startup
and shutdown (e.g. windows services, cloud services)
• Provides abstractions for getting environment information.
• Notifies hosted services on start up and shutdown.
Host Architecture: Microsoft.Extensions.*

Host

Dependency Host Lifetime

Logging Configuration HostedServices
Injection Environment Management
Microsoft.Extensions.* Design principles
• Decoupled from ASP.NET Core
• Built with dependency injection in mind
• netstandard2.0 compatible for the widest adoption
• Explicitly designed around provider model to allow extensibility (e.g.
configuration, logging)
Anatomy of a request

Server Request Route Matcher Optional Endpoint

• Accepts the Processing • Matches the Middleware Execution
incoming request • Creates a incoming request • Middleware run • Execute the
• Produce an HttpContext from against existing here can observe selected endpoint
IFeatureCollection the endpoints the selected • This may be a
for the request IFeatureCollection endpoint and Controller, gRPC
execution • Calls into the make decisions service, SignalR
middleware (e.g. auth and Hub etc
pipeline CORS)
Anatomy of a request: Server

Server Request Route Matcher Optional Endpoint

• Accepts the Processing • Matches the Middleware Execution
incoming request • Creates a incoming request • Middleware run • Execute the
• Produce an HttpContext from against existing here can observe selected endpoint
IFeatureCollection the endpoints the selected • This may be a
for the request IFeatureCollection endpoint and Controller, gRPC
execution • Calls into the make decisions service, SignalR
middleware (e.g. auth and Hub etc
pipeline CORS)
Server Architecture

Kestrel HttpSys IIS TestServer Other

IServer
Server
• Listen for incoming requests
• Responsible for the core request handling logic
• Produces an IFeatureCollection for request execution
• ASP.NET Core has a minimum set of features it expects all IServers to
implement.
• May expose additional server specific functionality (e.g. server variables in IIS)
• Call into the IHttpApplication registered with the server when
requests arrive
Server: Kestrel
• Cross platform
• Written entirely in managed code
• Extremely optimized
• Supports HTTP/1, HTTP/2, HTTP/3 (preview)
• Pluggable transports (see project bedrock)
• Default transport uses Sockets
• Other protocols are possible on top of transport abstraction
Server: Kestrel Architecture

Transport Connection HttpConnection HttpProtocol

• Exposes the ability to Middleware • Transforms the • Implements the
accept and read data • Exposes the transport incoming connection IFeatureCollection
from connections connection for into an HTTP/1/2/3 interface for all HTTP
(exposing the adaption (e.g. TLS is connection and versions.
underlying transport implemented here) implements the
semantics) • User defined protocol fully in
middleware may also managed code.
exist here.
• Terminal middleware
executes the
application.
Server: Kestrel Optimizations
• Buffering pooling at all the layers
• Uses the pinned object heap to reduce fragmentation
• Non-allocating HTTP parsers using Span
• Headers are dictionaries optimized for known header access
• We never allocate known header keys
• We can reuse header values
• Pooled HttpContext objects and associated state across requests
• Low level knobs exposed to optimize threading
Server: HttpSys (Windows Only)
• Managed wrapper over HTTP.sys
• Supports advanced HTTP.sys features
• Port sharing
• Request queue creation
• Kernel caching
• Sendfile
• Windows Auth (NTLM, Kerberos)
• Request queue delegation
Server: HttpSys Architecture
• Dequeue request from HTTP.sys request queue
• Dispatches to the request to the ThreadPool
• Wraps the HTTP API primitives in an IFeatureCollection
Server: IIS (Windows Only)
• Managed wrapper around native IIS Module
• Runs in 2 modes
• In process – Application code runs in the IIS worker process
• Does not support running multiple applications in a single worker process
• Does not support handling IIS module events
• Out of process – Application code runs in a separate process
• Deployed as 2 separate components
• A native shim installed globally
• A request handler that ships with ASP.NET or the application
• Not built into Windows (it’s a separate installer)
Server: IIS Architecture In-Process

w3wp.exe

Native IIS Shim (Native) InProcessRequestHandler IISServer

• Implements the IIS Module (Native) • Registers callbacks to enable the
interface (C++) • Initializes the CLR host and calls InProcessRequestHandler to
• Locates the in-process request the application entry point dispatch requests to managed
handler and calls the entry point • Calls into registered callback for code
request processing • Dispatches incoming requests to
• Executes IIS module pipeline the thread pool
steps • Exposes IIS HTTP primitives into
as an IFeatureCollection
Server: IIS Architecture Out-Of-Process

w3wp.exe App.exe

Native IIS Shim (Native) Out Of Process Kestrel

• Implements the IIS Module RequestHandler (Native) • Uses Kestrel to handle requests
interface (C++) • Launches the .NET Core process in a separate .NET Core process.
• Locates out of process request passing in the port to listen on.
handler and calls the entry point • Makes HTTP requests using
WinHTTP to the .NET Core
process
• Translates WinHTTP responses
into IIS responses.
Anatomy of a request: Request Processing

Server Request Route Matcher Optional Endpoint

• Accepts the Processing • Matches the Middleware Execution
incoming request • Creates a incoming request • Middleware run • Execute the
• Produce an HttpContext from against existing here can observe selected endpoint
IFeatureCollection the endpoints the selected • This may be a
for the request IFeatureCollection endpoint and Controller, gRPC
execution • Calls into the make decisions service, SignalR
middleware (e.g. auth and Hub etc
pipeline CORS)
Request Processing
• Creates a HttpContext from the IFeatureCollection
• The HttpContext wraps the server’s IFeatureCollection and exposes a
convenience layer on top
• Application code is written against this layer and is server agnostic
• Everything is asynchronous!
Middleware
• Central extensibility point of request processing.
• Execute cross cutting concerns that apply to either request and
response.
• Russian doll pattern
• Exposes a wide variety of options for modifying the request and
pipeline
• Branching the pipeline
• Short circuiting the incoming requests
• Decorate state on the HttpContext
• Wrapping the entire pipeline for exception handling
• …
Request Processing: Middleware Architecture

Endpoint
ExceptionHandler HttpsRedirection Route Matching UseAuthorization
Execution

Endpoint
ExceptionHandler HttpsRedirection Route Matching UseAuthorization
Execution
Middleware definition
Reference to the next middleware

Calling the next middleware in the pipeline

Middleware interface
Anatomy of a request: Routing

Server Request Route Matcher Optional Endpoint

• Accepts the Processing • Matches the Middleware Execution
incoming request • Creates a incoming request • Middleware run • Execute the
• Produce an HttpContext from against existing here can observe selected endpoint
IFeatureCollection the endpoints the selected • This may be a
for the request IFeatureCollection endpoint and Controller, gRPC
execution • Calls into the make decisions service, SignalR
middleware (e.g. auth and Hub etc
pipeline CORS)
Routing
• Matches the incoming request against a set of endpoints and their
criteria
• Supports Link/URL generation for registered routes
• Highly optimized route table and matching algorithm
Endpoints
• A RequestDelegate to execute
• Metadata about the code to execute
• For example, authorization metadata
• Decoupled from routing
• Middleware can be “endpoint aware”
• CORS
• Authorization
Endpoints
Endpoints

Add authorization
metadata

Pattern to match The RequestDelegate to execute

Anatomy of a request: Endpoint Execution
MVC

Server Request Route Matcher Optional Endpoint

• Accepts the Processing • Matches the Middleware Execution
incoming request • Creates a incoming request • Middleware run • Execute the
• Produce an HttpContext from against existing here can observe selected endpoint
IFeatureCollection the endpoints the selected • This may be a
for the request IFeatureCollection endpoint and Controller, gRPC
execution • Calls into the make decisions service, SignalR
middleware (e.g. auth and Hub etc
pipeline CORS)
MVC for APIs
• Declarative programming model that provides productivity features
for writing APIs
• Model binding – Convert incoming request objects into strongly typed models
• Model validation – Makes sure the bound models are valid
• Formatters – Read and write objects from/to the request/response
• Filters – Run custom logic on code that runs before/after application logic
• Content negotiation
• OpenAPI support via Swashbuckle
• Built on top of routing
Enable API conventions

Makes this route “products”

Automatically read from the body

Endpoint Metadata

Automatically read from the route

Helpers for returning results with various

Status codes
MVC : Bootstrapping

Build Apply
Discover Build
application conventions to
controllers endpoints
model model
MVC : Request Processing

ControllerActionInvoker

Model Binding and

AuthorizationFilters ResourceFilters ActionFilters Action Method ExceptionFilter ResultFilter
Validation
MVC : Request Processing

ControllerActionInvoker

Model Binding and

AuthorizationFilters ResourceFilters ActionFilters Action Method ExceptionFilter ResultFilter
Validation
Anatomy of a request: Review

Request Route Optional Endpoint

Server
Processing Matcher Middleware Execution
There’s more…
• ASP.NET Core is *huge*
• I couldn’t fit it all into this talk
• Hopefully, this gives you a good idea where to look for more details
• Read the source on https://github.com/dotnet/aspnetcore
Future: Houdini
• Project to make MVC’s disappear (hence the name)
• Push productivity features into the core of the stack
• Make the jump from imperative routing to declarative MVC smaller
• Improving the performance along the way
Questions?
Twitter: davidfowl