Forum Discussion
apasul_5707
Apr 30, 2012Nimbostratus
Configure BigIP to pass through http and https traffic
We are evaluating BigIP appliance for our SharePoint servers.
We have the http/https redirect configured on our IIS servers. How do I configure BigIP to just pass through http and https withouth trying to redirect http to https?
I installed the SSL certificate on the IIS servers, so I have NO for "SSL Encryption Question" in BigIP iApp.
I'm new at this, so I take any advice I get. Also, please let me know if you need more details about my configuration.
Thank you
apasul
- hooleylistCirrostratusHi apasul,
- apasul_5707NimbostratusHi Aaron,
- apasul_5707NimbostratusHere are some new info. The forms dont have harcoaded http links. Here is what it's happening:
- hooleylistCirrostratusThe iApp is geared towards either performing SSL offloading or no use of SSL. When you say you have the certs/keys installed on the Sharepoint servers, do you want to pass the SSL through encrypted to the pool or do you want to do clientside and serverside SSL? Or do you want to have LTM load balance the HTTP traffic to an HTTP pool and pass the HTTPS through with no SSL decryption? If the latter, why? It's generally simpler and more secure to have LTM redirect all HTTP traffic to HTTPS using an HTTP virtual server and then decrypt the SSL on the HTTPS virtual server. If you want to reencrypt the serverside SSL you can do that as well.
- apasul_5707NimbostratusAaron,
- hooleylistCirrostratusI'd try setting up the Sharepoint Alternate Access mapping to point to https://FQDN and then configure an HTTP virtual server that redirects to https://FQDN[HTTP::uri] and an HTTPS VS with a client SSL profile. If you want to re-encrypt on the serverside you can add a serverssl profile to the HTTPS VS and use a pool of the server(s) configured on port 443. If you're not doing server SSL you should use a port 80 pool.
- apasul_5707NimbostratusAaron,
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects