Using IIS as secure reverse proxy in front of less secure HTTP server?

I have a CppCMS based application and I cant use IIS's FastCGI connector as it is broken for my use thus I want to try to use the internal HTTP server designed for debug purposes behind IIS.

I it is quite simple web server for an application that handles basic HTTP/1.0 requests and does not care too much about security like DoS, file serving and more.

So I'd like to know if it is possible to use IIS in front of such application such that it would:

• Sanitize all requests - ensure that they are proper HTTP
• Handle all DoS issues li开发者_开发知识库ke timeouts
• Serve the static files.

Is this something that can be configured and done at all?

---

I would suggest this is the wrong way of doing this. I would use a web server like Nginx to proxy the requests through to backend server. It is very configurable and you will find a lot of articles with doing it to Apache.

---

We just did something like this. You want the URL Rewriter module. You can use it to sanitize the URLs, however, it isn't going to sanitize the payload. Which is to say, you can make sure that the URLs that hit your box are very specific ones, e.g. not attempts to hits CGI, but you can't use it to make sure that the contents of an upload are safe.

---

ModSecurity is out for IIS now, it can handle lots of the security related issues.