OWA CSS11501 and ssl termination

alpritchard · ‎02-13-2007

Hi,

Is it possible to use the css to load balance for OWA and offload SSL ?

have tried this and it appears to break OWA even though other web apps work ok through same CSS.

When removing ssl termination could only make load balancing work when incoming tcp port on the content rule and outgoing tcp port to OWA server were set to 80.

If content rule port was set to anyhting other than 80, OWA breaks.

guess there is some form of embedded redirection going on.

fmeetz · ‎02-19-2007

Refer to CSS content load balance:

http://www.cisco.com/en/US/products/hw/contnetw/ps792/products_configuration_guide_chapter09186a0080409a55.html#wp1038118

alpritchard · ‎02-19-2007

have set up many CSS load balancers so the basics are all in place.

OWA though appears to be a bit different, in terms of it using http 302 redirection.

This makes the client session bypass the VIP

Gilles Dufour · ‎02-20-2007

what kind of redirect do you get ?

Your server can send redirect, but it should use the vip address name and not the server name or server ip.

Many people are loadbalancing OWA successfully.

You may have to check the server config.

Gilles.

alpritchard · ‎02-20-2007

owa is sending a 302 of the form

http://servername.

because we are doing ssl offload on the css the redirect needs to be of the https://servername

We followed some guides for configuring exchange to do this but it did not seem to work.

Gilles Dufour · ‎02-21-2007

if all you need is replace the http with https, you can use the urlrewrite function.

A quick search in the configuration guide will show you how to use this command.

Gilles.

alpritchard · ‎02-21-2007

that looks like it will do the job by intercepting http 302's

tks