Difference between BasicHttpBinding and WsHttpBinding

• Download source code - 144.55 KB

Table of Contents

• Introduction and Goal
• Pre-requisite
• Difference between BasicHttpBinding and WsHttpBinding
• Five Steps to See the Actual Difference between BasicHttpBinding and WsHttpBinding
• Consideration When to Use BasicHttp and WsHttp
• History

Introduction and Goal

WCF has introduced lot of bindings and protocols. This article will concentrate on two important protocols BasicHttpBinding and WsHttpBinding which look similar but have some huge fundamental differences. So we will first start with the difference and then we will create a small project and see how the differences look practically.

Now a days, I am distributing my 400 questions and answers ebook which covers major .NET related topics like WCF, WPF, WWF, Ajax, Core .NET, SQL Server, Architecture and a lot more. I am sure you will enjoy this ebook.

Pre-requisite

In case you are new to WCF, please do read the basics from the below given links. Basics of WCF are not in the scope of this article:

• Windows Communication Framework (WCF) - Part 1
• Windows Communication Framework (WCF) - Part 2

Difference between BasicHttpBinding and WsHttpBinding

If we want to summarize in one sentence, the difference between WsHttpBinding and BasicHttpBinding is that WsHttpBinding supports WS-* specification. WS-* specifications are nothing but standards to extend web service capabilities.

Below is a detailed comparison table between both the entities from security, compatibility, reliability and SOAP version perspective.

One of the biggest differences you must have noticed is the security aspect. By default, BasicHttpBinding sends data in plain text while WsHttpBinding sends it in encrypted and secured manner. To demonstrate the same, lets make two services, one using BasicHttpBinding and the other using WsHttpBinding and then lets see the security aspect in a more detailed manner.

We will create a small sample to see how BasicHttpBinding sends data in plain text format and how WsHttpBinding encrypts data.

Note: By default, security is not enabled on BasicHttpBinding for interoperability purposes. In other words, it is like our old webservice, i.e. ASMX. But that does not mean we cannot enable security in BasicHttpBinding. Sometime back, we had a written an article on how to enable security on BasicHttpBinding.

Five Steps to See the Actual Difference between BasicHttpBinding and WsHttpBinding

In order to understand the real differences between both these entities, we will do a small project. In this project, we will create two WCF services, one service using BasicHttpBinding and the second service using WsHttpBinding.

Step 1: So lets first create a simple service using BasicHttpBinding. For that, we just create a simple WCF project and then modify the ServiceModel element as shown below. You can see in the endpoint tag that we have specified basicHttpBinding as the protocol.

<system.serviceModel>
<services>
<service name="WCFBasicHttpBinding.Service1" 
	behaviorConfiguration="WCFBasicHttpBinding.Service1Behavior">
<!-- Service Endpoints -->
<endpoint address="" binding="basicHttpBinding" contract="WCFBasicHttpBinding.IService1">
<!--
Upon deployment, the following identity element 
should be removed or replaced to reflect the
identity under which the deployed service runs. 
If removed, WCF will infer an appropriate identity
automatically.
-->
<identity>
<dns value="localhost"/>
</identity>
</endpoint>
<endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange"/>
</service>
</services>
<behaviors>
<serviceBehaviors>
<behavior name="WCFBasicHttpBinding.Service1Behavior">
<!-- To avoid disclosing metadata information, 
set the value below to false and remove the metadata endpoint above before deployment -->
<serviceMetadata httpGetEnabled="true"/>
<!-- To receive exception details in faults for debugging purposes, 
set the value below to true. Set to false before deployment to avoid 
disclosing exception information -->
<serviceDebug includeExceptionDetailInFaults="false"/>
</behavior>
</serviceBehaviors>
</behaviors>
</system.serviceModel>

Step 2: We also need to create one more service using WsHttpBinding. For that, you do not need to do anything special as such. By default, WCF project is created using WsHttpBinding. Below is how the Web.config file looks like. You can see how the endpoint tag is using wsHttpBinding.

<system.serviceModel>
<services>
<service name="WCFWsHttpBindingHttps.Service1" 
	behaviorConfiguration="WCFWsHttpBindingHttps.Service1Behavior">
<!-- Service Endpoints -->
<endpoint address="" binding="wsHttpBinding" contract="WCFWsHttpBindingHttps.IService1">
<!--
Upon deployment, the following identity element 
should be removed or replaced to reflect the
identity under which the deployed service runs. 
If removed, WCF will infer an appropriate identity
automatically.
-->
<identity>
<dns value="localhost"/>
</identity>
</endpoint>
<endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange"/>
</service>
</services>
<behaviors>
<serviceBehaviors>
<behavior name="WCFWsHttpBindingHttps.Service1Behavior">
<!-- To avoid disclosing metadata information, 
set the value below to false and remove the metadata endpoint above before deployment -->
<serviceMetadata httpGetEnabled="true"/>
<!-- To receive exception details in faults for debugging purposes, 
set the value below to true. Set to false before deployment to avoid 
disclosing exception information -->
<serviceDebug includeExceptionDetailInFaults="false"/>
</behavior>
</serviceBehaviors>
</behaviors>
</system.serviceModel>

Step 3: We will not be creating any new methods in both the services. We will just use the default code created by the WCF template. So both these services will have a GetData function which returns a string. The GetData function is a default function created WCF project.

public class Service1 : IService1
{
public string GetData(int value)
{
return string.Format("You entered: {0}", value);
}
public CompositeType GetDataUsingDataContract(CompositeType composite)
{
if (composite.BoolValue)
{
composite.StringValue += "Suffix";
}
return composite;
}
}

Step 4: Now that our services are created, we need to create a client which will consume this service. So we have created a simple web application and we have added two references, one is a service reference, i.e. WsHttpBinding and the second is a web reference, i.e. BasicHttpBinding. Please note that when you right click to add reference, you need to use the Add service reference to add WsHttpService and you need to add web reference for BasicHttpBinding.

We will add two buttons on the default aspx page. One button will call the HTTP service and the other will call the wshttp service. Below is how the function GetData is called in both the button clicks.

Step 5: So now that we are ready with the complete project, it is time to sniff and see how data is transported between client and the service in both the scenarios. So lets download a simple HTTP data recorder from here. We will then click both the buttons one by one and record the data transfer using httpanalyzer. You can see the posted data is in simple plain XML format for basic HTTP protocol and its in an encrypted format for wshttp protocol.

In other words, avoid BasicHttp as far as possible.

Consideration When to Use BasicHttp and WsHttp

If you are looking for backward compatibility and to support a lot of clients, then basic HTTP binding is the way to go or else WsHttp is a great way to start if you are seeing your clients made in .NET 3.0 and above.

History

• 13^th May, 2009: Initial post

This article, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)