Forum Discussion

robdtec_20128's avatar
robdtec_20128
Icon for Nimbostratus rankNimbostratus
Aug 22, 2012

sharepoint 2010 guidance

Hello,

 

 

I've been tasked with providing a load balancing solution for 2 WFE's in a sharepoint 2010 farm with our F5 device (running 10.2.4). Unfortunately, I'm an expert in neither sharepoint nor the F5 - but it is what it is. I've read the deployment guide from F5, however, it doesn't really fit our scenario. The guide goes over plain HTTP deployment or SSL offloading. We'd prefer SSL passthrough. I did manage to get it to work over plain HTTP, but as I mentioned, this isn't ideal - in fact, we usually have an HTTP to HTTPS redirect in place on the WFE (i disabled it just for this test). Once I try to go over HTTPS, I get a blank page staring back at me in my browser.

 

 

 

Any ideas where I should start investigating? Right now I'm only using IPs. I haven't added any new FQDNs to the existing certificate. Could that be causing an issue? Should I be seeing some error?

 

 

 

Thanks in advance

 

  • Hi Robdtec,

     

     

    The change from HTTP to HTTPS passthrough is really not that difficult. Ensure that your pool members are either :0 or the port your FEs are listening for https requests on (generally 443 but not always) and that your VIP port is 443 (or, again, whatever port you prefer.) Ensure there are no SSL profiles enabled and you should be good to go.

     

     

    In this configuration, the SSL certificate will be served from the FE and if the FQDN doesn't match the cert your browser will just let you know it's not trusted by default. If it's still not working you'll want to check the logs on the FE or run some TCPDumps to see what's going on.

     

     

    Hope this helps.

     

    John
  • mikeshimkus_111's avatar
    mikeshimkus_111
    Historic F5 Account
    Hi robdtec,

     

    You are correct, it looks like the v10 deployment guide does not have guidance for configuring SSL bridging for SharePoint. Check out the v11 deployment guide here: http://www.f5.com/pdf/deployment-guides/sharepoint-2010-iapp-dg.pdf; the steps starting on page 19 and the guidance in the manual configuration table should get you there on v10.

     

     

    Not sure if you have already configured your Alternate Access Mappings in SharePoint, but you will need entries there for https:// as well.

     

     

    Post back with your results and any further issues/questions.

     

    thanks

     

    Mike