two iis 7.5 SP behind big ip

[Andy Fisher]

That's pretty much our configuration.  We'll have 60+ IIS 7.5 web servers
behind our F5 with offloaded SSL.  We are using lazy sessions and cookie
based load balancing.  Right now we're running IIS 6 behind the F5, but in
two weeks we'll convert the web platform to 7.5.    

We're going through testing right now.  So far we haven't had any problems
with it.  I will recommend that the notes about case sensitivity with
Shibboleth and IIS 7.5 are not true.  Always watch your case.  It must
match perfectly.

-Andy   


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
On Behalf Of Cantor, Scott
Sent: Wednesday, April 18, 2012 3:02 PM
To: Shib Users
Subject: Re: two iis 7.5 SP behind big ip

On 4/18/12 2:54 PM, "Blue Sky" <bluesky997 at hotmail.com> wrote:
>
>I have been researching the possibility of having two IIS 7.5 server as 
>(load balancing/failover) SP behind a big-ip that uses ssl offloading.
>
>Is that doable?

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPClustering

Short answer is, IIS doesn't support SSL offloading, period. Or any other
form of virtualized hosting. Any app that works in that environment is is
doing relative redirects (illegal in HTTP) or hardcoding its own URL
somewhere in a file or database.

The SP takes pains to work around this limitation, but I see no benefit in
advocating people deploy IIS in a manner that it itself does not support.
Lots of people do, of course.

-- Scott

--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net