A10 AX Series Скачать руководство пользователя | Manualshive

Страница: 43 / 50

background image

AX Series for SharePoint 2010 Deployment Guide

43

9.7 SECURING SHAREPOINT VIA AFLEX

This section of the deployment guide explains how to redirect SharePoint traffic that comes from HTTP to
HTTPS using the AX aFleX scripts. aFleX is based on a standard scripting language, TCL, and it enables
the load balancer to perform Layer 7 deep-packet inspection (DPI). For examples of aFleX scripts, please
refer to the following URL below:

http://www.a10networks.com/products/axseries-aflex_advanced_scripting.php

Figure 50: Redirect Overview

As an example, one of the most common aFleX scripts that can be used with SharePoint 2010 server is
the “HTTP redirect to HTTPS traffic”. You can download additional aFleX script examples from the
following URL:

To configure a transparent HTTPS redirect using aFleX script:

Step 1

. Create aFleX Script

Step 2.

Configure VIP with HTTP/Port 80

Step 3:

Apply aFleX to VIP

9.7.1 CREATE AFLEX SCRIPT

1. Navigate to

Config Mode > Service > aFleX

.

2. Click

Add

.

3. Within the

Definition

box, enter the TCL code.

4. Click

OK

and then click

Save

to store your configuration changes.

«
...
41
42
43
44
45
...
»

Содержание AX Series

Страница 1: ...Deployment Guide AX Series for SharePoint 2010 DG_ACC_062011 1...

Страница 2: ...onfiguration 11 8 2 Health Monitor Configuration 12 8 3 Service Group Configuration 13 8 4 Virtual Server Configuration 15 8 5 Source IP Persistence 17 8 5 1 Create IP Persistence Template 17 8 5 2 Ap...

Страница 3: ...Template to VIP 34 9 3 3 Validate the Deployment 35 9 4 Cookie Persistence 35 9 4 1 Create Cookie Persistence Template 35 9 4 2 Apply Cookie Persistence Template to VIP 36 9 4 3 Validating the Deploy...

Страница 4: ...Series for SharePoint 2010 Deployment Guide 4 9 7 3 Apply AFLEX Script to VIP 45 9 7 4 Validate AFLEX Service 46 10 Summary and Conclusion 47 11 Appendix 48 11 1 AX Series CLI sample configurations 4...

Страница 5: ...oad balancing services for Microsoft SharePoint 2010 2 DEPLOYMENT GUIDE OVERVIEW This document shows how an A10 Networks AX Series device can be deployed with Microsoft SharePoint 2010 The tested solu...

Страница 6: ...sted based on AX Release 2 6 1 Clients OS 64 bit Windows 7 Operating System Client browsers Microsoft Internet Explorer Version 8 0 Google Chrome Version 10 0 Mozilla Firefox Version 4 0 1 Note If the...

Страница 7: ...m a Command Line Interface CLI or Graphical User Interface GUI CLI Text based interface in which you type commands on a command line You can access the CLI directly through the serial console or over...

Страница 8: ...DNS server and optional Network Access Storage NAS 2 Install base Windows OS Windows 2010 64 bit and install required software prerequisites Install SQL database and provision a SQL Admin account with...

Страница 9: ...AX Series for SharePoint 2010 Deployment Guide 9 7 ARCHITECTURE OVERVIEW Figure 2 SharePoint 2010 Deployment Topology...

Страница 10: ...ration uses the AX series device to load balance SharePoint traffic using a secured HTTPS connection The WFE are the only servers that are load balanced by the AX This is because Microsoft SharePoint...

Страница 11: ...rs in the AX Series 1 Navigate to Config Mode SLB Server 2 Click Add to add a new server 3 Within the Server section enter the following required information 4 Name WS1 5 IP address Host 172 16 1 5 No...

Страница 12: ...er or a port does not respond appropriately to a health check the server will be temporarily removed from the list of available servers Once the server is restored and starts responding appropriately...

Страница 13: ...AX device can select to service client requests A service group supports multiple SharePoint real servers as one logical server 1 Navigate to Config Mode SLB Service Group 2 Click Add to add a new se...

Страница 14: ...indow add one or more servers from the server drop down list Server Select WS1 from the drop down menu Port Enter 443 6 Click Add and enter all the available SharePoint web servers Figure 8 shows that...

Страница 15: ...avigate to Config Mode SLB Virtual Server General 2 Within the General section enter the following required information Name WS VIP IP Address or CIDR Subnet 172 16 1 200 Figure 9 Virtual Server or VI...

Страница 16: ...SharePoint 2010 Deployment Guide 16 Figure 10 Virtual Server Port Configuration Figure 11 Virtual Port Lists Figure 12 Virtual Services Overview 6 Click OK and then click Save to store your configura...

Страница 17: ...he same server This deployment guide focuses on Source IP Persistence in the basic SharePoint configuration Cookie persistence configuration will be featured within the Advanced SharePoint section Fig...

Страница 18: ...Template Configuration 4 Click OK and then click Save to store your configuration changes 8 6 IP SOURCE NAT Optional Only for one arm deployment This section configures the IP Address pool to be used...

Страница 19: ...and traffic flow overview 8 6 1 CREATE IP SOURCE NAT TEMPLATE 1 Navigate to Config Mode Service IP Source NAT 2 Click Add 3 Enter IP Source NAT Name SNAT 4 Enter Start IP Address 172 16 1 250 Example...

Страница 20: ...t of many concurrent users it is advisable to configure multiple SNAT IP addresses One IP address can be used for up to 64 000 flows 8 6 2 APPLY IP SOURCE NAT TO THE VIP 1 Navigate to Config Mode Serv...

Страница 21: ...do the following 1 Navigate to Monitor Mode Service SLB Virtual Server 2 Check that the Status states is green Figure 19 Virtual Server status 3 Launch one of the approved web browsers from the lists...

Страница 22: ...asic configuration are required Import existing SharePoint webserver SSL cert or create self signed CA from the AX Create one client and one server SSL template On the virtual server change the servic...

Страница 23: ...select Self from the from the drop down menu and then enter the following values Common Name SharePoint example com Division A10 Organization A10 Locality San Jose State or Province CA Country USA Em...

Страница 24: ...AX Series for SharePoint 2010 Deployment Guide 24 Figure 21 Client SSL Certificate Creation...

Страница 25: ...ter a name for the certificate WS 4 Select Local next to Import Certificate from 5 Enter the Certificate Password if applicable 6 Click Browse and navigate to the certificate file Note If you are impo...

Страница 26: ...SSL TEMPLATE This section describes how to configure a client SSL template and apply it to the VIP 1 Navigate to Config Mode Service Template SSL Client SSL 2 Click Add 3 Enter the Name Client SSL WS...

Страница 27: ...rver SSL Template 9 1 3 ON THE VIRTUAL SERVER CHANGE THE SERVICE TYPE OF THE VIRTUAL PORT FROM TCP TO HTTPS AND APPLY THE NEW CLIENT AND SERVER SSL TEMPLATE 9 1 3 1 CHANGE THE SERVICE TYPE OF THE VIRT...

Страница 28: ...SSL template is completed you must bind the Client and Server SSL to the HTTPS VIP Port 443 as follows 1 Navigate to Config Mode SLB Virtual Server 2 Click on the Virtual Server name 3 Select 443 and...

Страница 29: ...e burden of processing SSL traffic from the SharePoint web servers Instead of having the SharePoint servers handling these transactions the AX Series decrypts traffic and forwards the traffic to the S...

Страница 30: ...eckbox next to a server b Edit the Port from 443 to 80 c Select Update 4 Repeat for each additional server Figure 29 Server Configuration 5 Click OK and then click Save to store your configuration cha...

Страница 31: ...e to store your configuration changes 9 2 3 VALIDATE THE DEPLOYMENT To validate that SSL Offload is working navigate to Monitor Mode Service Application SSL Note Browse to the SharePoint site with HTT...

Страница 32: ...data transmitted and faster response times to the client Figure 32 HTTP Compression Overview 9 3 1 CREATE HTTP COMPRESSION TEMPLATE 1 Navigate to Config Mode Template Application HTTP 2 Click Add 3 E...

Страница 33: ...ide 33 Note The AX device offers various compression levels ranging from levels 1 to 9 Level 1 is the recommended compression setting Figure 34 Compression Configuration Column 5 Click OK and then cli...

Страница 34: ...rver Port 1 Navigate to Config Mode SLB Virtual Server 2 Click on the Virtual Server name 3 Select 443 and click Edit 4 Locate the HTTP Template drop down menu and select HTTP Compression to apply the...

Страница 35: ...After 9 4 COOKIE PERSISTENCE Cookie persistence provides granularity in comparison to Source IP persistence With cookie persistence the session data is kept within the user s browser 9 4 1 CREATE COO...

Страница 36: ...RSISTENCE TEMPLATE TO VIP To apply cookie persistence to the VIP 1 Navigate to Config Mode SLB Virtual Server 2 Click on the Virtual Server name 3 Select 443 and click Edit 4 From the list of AX featu...

Страница 37: ...nnections for multiple client requests This reduces the total number of TCP connections to each SharePoint WFE server The advantage of reusing connections is to off load the server TCP stack in order...

Страница 38: ...Connection Reuse 2 Click Add 3 Enter the Name SharePoint Connection 4 Click OK and then click Save to store your configuration changes Figure 42 Connection Reuse Overview 9 5 2 CREATE AN IP SOURCE NAT...

Страница 39: ...k Edit 4 Locate the Connection Reuse Template drop down list and select SharePoint Connection to apply the connection reuse feature to the virtual server port Figure 43 Connection Reuse Template 5 Loc...

Страница 40: ...nection reuse is working properly compare the total current connections of the VIP to the real servers current connections The real server s current connections will be less than the current connectio...

Страница 41: ...n Content Size 10 Bytes Max Content Size 4194303 Bytes 6 Click OK and then click Save to store your configuration changes Note The RAM caching policy option is not required unless you have specific da...

Страница 42: ...name 3 Select 443 and click Edit 4 Locate the RAM Caching Template drop down list and select SharePoint RAM Caching to apply the RAM caching to the virtual server port Figure 48 RAM Caching Template 5...

Страница 43: ...tworks com products axseries aflex_advanced_scripting php Figure 50 Redirect Overview As an example one of the most common aFleX scripts that can be used with SharePoint 2010 server is the HTTP redire...

Страница 44: ...rePoint 2010 Deployment Guide 44 Figure 51 aFleX Redirect Configuration Redirect Script Copy and Paste when HTTP_REQUEST HTTP redirect https HTTP host HTTP uri The aFleX script must be bound to Virtua...

Страница 45: ...ype HTTP 5 Port 80 Figure 52 VIP Configuration 6 Click OK and then click Save to store your configuration changes 9 7 3 APPLY AFLEX SCRIPT TO VIP 7 Navigate to Config Mode SLB Virtual Server 8 Click o...

Страница 46: ...AFLEX SERVICE To verify that the aFleX script is working open a web browser and navigate to http example com The browser will accept the URL request and client URL address will change from http examp...

Страница 47: ...bute client traffic seamlessly across multiple SharePoint WFE Servers for site scalability Higher connection throughput faster end user responsiveness and reduce WFE CPU utilization by initiating SSL...

Страница 48: ...Dublin interface management ip address 192 168 18 41 255 255 255 0 ip nat pool SNAT 172 16 1 250 172 16 1 250 netmask 24 health monitor SharePoint HC method http slb server WS1 172 16 1 5 port 443 tc...

Страница 49: ...m mode advconfig ax2 show run interfaces management enable hostname advconfig ax2 clock timezone Europe Dublin interface management ip address 192 168 18 41 255 255 255 0 ip nat pool SNAT 172 16 1 250...

Страница 50: ...template client ssl Client SSL WS cert WS key WS slb template persist cookie SharePoint Cookie slb virtual server WS VIP 172 16 1 200 port 443 https name _172 16 1 200_HTTPS_443 source nat pool SNAT...

Отзывы:

Нет отзывов

Похожие инструкции для AX Series

Бренд: D-Link Страницы: 7

Бренд: Cross Technologies Страницы: 20

Raritan Dominion LX II

Бренд: LEGRAND Страницы: 7

TradeSwitch2-USB

Бренд: G&D Страницы: 88

LVP-51 LVP-51 Series

Бренд: Omega Engineering Страницы: 6

Бренд: Accton Technology Страницы: 547

Бренд: Alloy Страницы: 33

Бренд: FS Страницы: 43

Бренд: IOGear Страницы: 10

Бренд: ALFAtron Страницы: 32

Бренд: HighSecLabs Страницы: 4

Бренд: Stahl Страницы: 44

Бренд: Jasco Страницы: 2

Atlona JunoX 451

Бренд: Panduit Страницы: 8

Бренд: SolidView Страницы: 39

Бренд: PureLink Страницы: 12

SOMAT XR EX23-R

Бренд: HBM Страницы: 2

Бренд: Pulsar Страницы: 8

Бренды по названию

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Популярные бренды

Загрузить еще бренды