For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

solaikumar_1217's avatar
solaikumar_1217
Icon for Nimbostratus rankNimbostratus
Feb 13, 2016

SSL Offloading not functioning properly for SharePoint 2013

Dear All,   We have a share point application which needs to be load balanced through F5. The applications have been configured using F5 verified iApp and the same is working well when we run as ...
application delivery
f5 iapps
LTM
sharepoint 2013
TMOS
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Feb 13, 2016

It sounds like you're experiencing the "reverse proxy problem". Essentially, internal applications don't know that they're being proxied, so they return localized URLs, that the client inevitably cannot reach. Generally the best way to handle this issue is with a rewrite function. In your case it may just be that HTTP:// URLs need to be rewritten to Apply a generic STREAM profile to the virtual server and this iRule:

when HTTP_REQUEST {
    STREAM::disable
    HTTP::header remove Accept-Encoding
}
when HTTP_RESPONSE {
    if { [HTTP::header exists Location] } {
        HTTP::header replace Location [string map -nocase {"http://" "https://"} [HTTP::header Location]]
    }
    if { [HTTP::header Content-Type] contains "text" } {
        STREAM::expression {@http://@https://@}
        STREAM::enable
    }
}

More information on the STREAM command can be found here: https://devcentral.f5.com/wiki/iRules.STREAM.ashx