Forum Discussion

asso_6902's avatar
asso_6902
Icon for Nimbostratus rankNimbostratus
May 10, 2007

Microsoft Office SharePoint Server 2007 - ssl offloading with F5 Big IP

I was wondering if someone can help me.

 

 

I already Deployed Moss2007 and it is working fine.

 

 

I used the Deployment guide from f5 to use F5 Big IP LTM with Moss2007, i also used the ssl client profile to implement SSL-Offloading.

 

 

everything is working fine and i can connect to the Virtual Server and everything is https.

 

 

The problem is : some buttons ( like the 'Sign In' link at the top right corner of the main screen ) and some links ( inside the search ) are still http links, so whan i click on those links it takes me back to the main page of sharepoint, because the these wrong links are still http and not https.

 

 

This is only happening for some links , other links are working fine!!!

 

 

Any one implemented Moss2007 with F5 to do SSl-Offloading succesfully??

 

 

Any help is most appreciated, i already opened a case with support but still 3 days and there is no answer!!!

 

 

Thanks for any help in advance!!

7 Replies

  • Tech_Imp_40243's avatar
    Tech_Imp_40243
    Historic F5 Account
    From the inital discussion it looks like there needs to be some tuning of the redirect iRule. What does your rule look like?
  • as suggested in the deployment guide i put the following Irule:

     

     

    when HTTP_REQUEST {

     

    HTTP::redirect https://[HTTP::host]/

     

    }
  • Tech_Imp_40243's avatar
    Tech_Imp_40243
    Historic F5 Account
    The rule looks good. Thanks.

     

     

    Now that we can rule that out and given the symptopms I'd like to try an quick test. What happens when you disable the client ssl profile?

     

     

  • I figured it out.

     

    The iRule was not right!!!

     

     

    It was redirecting only the host from http to https and was dropping the rest URI.

     

     

    the iRule that works should be :

     

     

    when HTTP_REQUEST {

     

    HTTP::redirect https://[HTTP::host][HTTP::uri]

     

    }

     

     

    F5 should be updating there deplyment guide inorder to realy support Microsoft Sharepoint 2007.
  • Tech_Imp_40243's avatar
    Tech_Imp_40243
    Historic F5 Account
    Good Catch!

     

     

    I work with the team to get the rule updated.

     

     

    Sorry about the confusion and thank you for pointing this out.

     

     

  • I'm using the same iRule with Moss2007 and I'm having a looping problem. Anyone run into this?
  • Have you considered using alternate access mapping configuration in sharepoint to instruct sharepoint to use the external protocol and alias to avoid the need for an iRule? You can check this post for some related info and links:

     

     

    http://devcentral.f5.com/Default.aspx?tabid=53&forumid=5&tpage=1&view=topic&postid=3352955976

     

     

    Aaron