For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Bernard_9303's avatar
Bernard_9303
Icon for Nimbostratus rankNimbostratus
Mar 01, 2009

SharePoint redirection issue - iRules help needed

Hi,

 

I have a issue with redirection on SharePoint on F5 LTM. Below is my current setup and problem that I face now. I'm doing SSL offloading on F5LTM.

 

 

On the F5 LTM, these are the settings:

 

Virtual server: sharept_vs_https

 

Pool: sharept_pool_https

 

Pool members: 10.10.0.80:443 and 10.10.0.81:443 (2 SharePoint Servers)

 

 

To access SharePoint Server, client needs to access this site:

 

https://sharept.hci.edu.sg

 

 

Problem:

 

When a client access https://sharept.hci.edu.sg, the Sharepoint server redirects the client to either http://10.10.0.80/sharept or http://10.10.0.80/sharept instead of https://shrept.hci.edu.sg.

 

 

Question:

 

How do I use iRules to to prevent such redirection or reverse the redirection caused by the SharePoint Servers?

 

 

 

Thanks,

 

Bernard
application delivery
dev
devops
iRules

5 Replies

  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Mar 09, 2009
    are you re-encrypting before sending traffic to the sharepoint servers?
  • Bernard_9303's avatar
    Bernard_9303
    Icon for Nimbostratus rankNimbostratus
    Mar 10, 2009
    Hi,

     

     

    Thanks for your reply...

     

     

    I'm terminating SSL on F5 LTM, traffic between F5 LTM and sharePoint Servers is unencrypted.

     

     

     

    Regards,

     

    Bernard
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Mar 11, 2009
    I think Sharepoint's method for configuring external host, port and/or URI aliases is to use Alternate Access Mappings:

     

     

    What every SharePoint administrator needs to know about Alternate Access Mappings (Part 1 of 3)

     

    http://blogs.msdn.com/sharepoint/archive/2007/03/06/what-every-sharepoint-administrator-needs-to-know-about-alternate-access-mappings-part-1.aspx (Click here)

     

     

    Plan alternate access mappings (Windows SharePoint Services)

     

    http://technet.microsoft.com/en-us/library/cc288609.aspx (Click here)

     

     

    I haven't tested this, but I'd be interested in hearing about your experiences if you try it.

     

     

    Aaron
  • Bernard_9303's avatar
    Bernard_9303
    Icon for Nimbostratus rankNimbostratus
    Mar 12, 2009
    Hi,

     

     

    I do heard from some people that iRules can be used to achieve the redirection, can anyone advise?

     

     

     

    Thanks,

     

    Bernard
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Mar 12, 2009
    Sure, it's possible to do this in an iRule, but it would be more efficient to have Sharepoint use the correct external alias in its references to itself.

     

     

    Take a look at this post and the rest of the thread for an example of how to do this with an iRule and indications from the past poster that changing the sharepoint configuration avoided the need for an iRule:

     

     

    Sharepoint 2007 Problem

     

    http://devcentral.f5.com/Default.aspx?tabid=53&view=topic&postid=30877&ptarget=30883 (Click here)

     

     

    Aaron