For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Brady_Myers's avatar
Brady_Myers
Icon for Nimbostratus rankNimbostratus
Jan 22, 2020

Allow Mixed content on Sharepoint Via iRule

I am looking for an iRule that handles mixed content not showing up on one of our ssl offloading vips. There are some articles in DEV central about this but I have been unsuccessful thus far. I hav...
devops
iRules
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Jan 24, 2020

Hi Brady,

 

You have 2 solutions:

 

  • use ani rule rewriting response page, with a CPU consumption around 10 times more than without rewriting (I already saw around 15 times more, and this is the same with any reverse proxy rewriting response pages), with some failures (javascript creating URL from multiple variables can't be rewritten)
  • spend up to 30 minutes to change Sharepoint behavior with Alternate Access Mapping parameter according to deployment guide (https://www.f5.com/content/dam/f5/corp/global/pdf/deployment-guides/microsoft-sharepoint-2016-dg.pdf)

 

To optimize user experience, it is not recommended to use different URL for internal and external users.

 

If users in the internal network use http://sp.company.com and users On Internet use https://sp.company.com through BigIP, when a user connected with https URL want to share by email a link (starting with https://), a user connected to internal network won't be able to access it.

 

There are lots of issues with such deployment.