Forum Discussion
asso_6902
Nimbostratus
NimbostratusMicrosoft Office SharePoint Server 2007 - ssl offloading with F5 Big IP
I was wondering if someone can help me.
I already Deployed Moss2007 and it is working fine.
I used the Deployment guide from f5 to use F5 Big IP LTM with Moss2007, i also used the ssl client profile to implement SSL-Offloading.
everything is working fine and i can connect to the Virtual Server and everything is https.
The problem is : some buttons ( like the 'Sign In' link at the top right corner of the main screen ) and some links ( inside the search ) are still http links, so whan i click on those links it takes me back to the main page of sharepoint, because the these wrong links are still http and not https.
This is only happening for some links , other links are working fine!!!
Any one implemented Moss2007 with F5 to do SSl-Offloading succesfully??
Any help is most appreciated, i already opened a case with support but still 3 days and there is no answer!!!
Thanks for any help in advance!!
- From the inital discussion it looks like there needs to be some tuning of the redirect iRule. What does your rule look like?
asso_6902as suggested in the deployment guide i put the following Irule:
when HTTP_REQUEST {
HTTP::redirect https://[HTTP::host]/
}- The rule looks good. Thanks.
Now that we can rule that out and given the symptopms I'd like to try an quick test. What happens when you disable the client ssl profile? - asso_6902I figured it out.
The iRule was not right!!!
It was redirecting only the host from http to https and was dropping the rest URI.
the iRule that works should be :
when HTTP_REQUEST {
HTTP::redirect https://[HTTP::host][HTTP::uri]
}
F5 should be updating there deplyment guide inorder to realy support Microsoft Sharepoint 2007. - Good Catch!
I work with the team to get the rule updated.
Sorry about the confusion and thank you for pointing this out. 
Rod_82621I'm using the same iRule with Moss2007 and I'm having a looping problem. Anyone run into this?
hoolioCirrostratus
Have you considered using alternate access mapping configuration in sharepoint to instruct sharepoint to use the external protocol and alias to avoid the need for an iRule? You can check this post for some related info and links:
http://devcentral.f5.com/Default.aspx?tabid=53&forumid=5&tpage=1&view=topic&postid=3352955976
Aaron
