Forum Discussion
apasul_5707
Nimbostratus
Apr 30, 2012Configure BigIP to pass through http and https traffic
We are evaluating BigIP appliance for our SharePoint servers.
We have the http/https redirect configured on our IIS servers. How do I configure BigIP to just pass through http and https withouth trying to redirect http to https?
I installed the SSL certificate on the IIS servers, so I have NO for "SSL Encryption Question" in BigIP iApp.
I'm new at this, so I take any advice I get. Also, please let me know if you need more details about my configuration.
Thank you
apasul
- hoolio
Cirrostratus
Hi apasul, - apasul_5707
Nimbostratus
Hi Aaron, - apasul_5707
Nimbostratus
Here are some new info. The forms dont have harcoaded http links. Here is what it's happening: - hoolio
Cirrostratus
The iApp is geared towards either performing SSL offloading or no use of SSL. When you say you have the certs/keys installed on the Sharepoint servers, do you want to pass the SSL through encrypted to the pool or do you want to do clientside and serverside SSL? Or do you want to have LTM load balance the HTTP traffic to an HTTP pool and pass the HTTPS through with no SSL decryption? If the latter, why? It's generally simpler and more secure to have LTM redirect all HTTP traffic to HTTPS using an HTTP virtual server and then decrypt the SSL on the HTTPS virtual server. If you want to reencrypt the serverside SSL you can do that as well. - apasul_5707
Nimbostratus
Aaron, - hoolio
Cirrostratus
I'd try setting up the Sharepoint Alternate Access mapping to point to https://FQDN and then configure an HTTP virtual server that redirects to https://FQDN[HTTP::uri] and an HTTPS VS with a client SSL profile. If you want to re-encrypt on the serverside you can add a serverssl profile to the HTTPS VS and use a pool of the server(s) configured on port 443. If you're not doing server SSL you should use a port 80 pool. - apasul_5707
Nimbostratus
Aaron,
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects