A10 AX Series, Deployment Manual

Page 1: ...Deployment Guide AX Series for SharePoint 2010 DG_ACC_062011 1...

Page 2: ...onfiguration 11 8 2 Health Monitor Configuration 12 8 3 Service Group Configuration 13 8 4 Virtual Server Configuration 15 8 5 Source IP Persistence 17 8 5 1 Create IP Persistence Template 17 8 5 2 Ap...

Page 3: ...Template to VIP 34 9 3 3 Validate the Deployment 35 9 4 Cookie Persistence 35 9 4 1 Create Cookie Persistence Template 35 9 4 2 Apply Cookie Persistence Template to VIP 36 9 4 3 Validating the Deploy...

Page 4: ...Series for SharePoint 2010 Deployment Guide 4 9 7 3 Apply AFLEX Script to VIP 45 9 7 4 Validate AFLEX Service 46 10 Summary and Conclusion 47 11 Appendix 48 11 1 AX Series CLI sample configurations 4...

Page 5: ...oad balancing services for Microsoft SharePoint 2010 2 DEPLOYMENT GUIDE OVERVIEW This document shows how an A10 Networks AX Series device can be deployed with Microsoft SharePoint 2010 The tested solu...

Page 6: ...sted based on AX Release 2 6 1 Clients OS 64 bit Windows 7 Operating System Client browsers Microsoft Internet Explorer Version 8 0 Google Chrome Version 10 0 Mozilla Firefox Version 4 0 1 Note If the...

Page 7: ...m a Command Line Interface CLI or Graphical User Interface GUI CLI Text based interface in which you type commands on a command line You can access the CLI directly through the serial console or over...

Page 8: ...DNS server and optional Network Access Storage NAS 2 Install base Windows OS Windows 2010 64 bit and install required software prerequisites Install SQL database and provision a SQL Admin account with...

Page 9: ...AX Series for SharePoint 2010 Deployment Guide 9 7 ARCHITECTURE OVERVIEW Figure 2 SharePoint 2010 Deployment Topology...

Page 10: ...ration uses the AX series device to load balance SharePoint traffic using a secured HTTPS connection The WFE are the only servers that are load balanced by the AX This is because Microsoft SharePoint...

Page 11: ...rs in the AX Series 1 Navigate to Config Mode SLB Server 2 Click Add to add a new server 3 Within the Server section enter the following required information 4 Name WS1 5 IP address Host 172 16 1 5 No...

Page 12: ...er or a port does not respond appropriately to a health check the server will be temporarily removed from the list of available servers Once the server is restored and starts responding appropriately...

Page 13: ...AX device can select to service client requests A service group supports multiple SharePoint real servers as one logical server 1 Navigate to Config Mode SLB Service Group 2 Click Add to add a new se...

Page 14: ...indow add one or more servers from the server drop down list Server Select WS1 from the drop down menu Port Enter 443 6 Click Add and enter all the available SharePoint web servers Figure 8 shows that...

Page 15: ...avigate to Config Mode SLB Virtual Server General 2 Within the General section enter the following required information Name WS VIP IP Address or CIDR Subnet 172 16 1 200 Figure 9 Virtual Server or VI...

Page 16: ...SharePoint 2010 Deployment Guide 16 Figure 10 Virtual Server Port Configuration Figure 11 Virtual Port Lists Figure 12 Virtual Services Overview 6 Click OK and then click Save to store your configura...

Page 17: ...he same server This deployment guide focuses on Source IP Persistence in the basic SharePoint configuration Cookie persistence configuration will be featured within the Advanced SharePoint section Fig...

Page 18: ...Template Configuration 4 Click OK and then click Save to store your configuration changes 8 6 IP SOURCE NAT Optional Only for one arm deployment This section configures the IP Address pool to be used...

Page 19: ...and traffic flow overview 8 6 1 CREATE IP SOURCE NAT TEMPLATE 1 Navigate to Config Mode Service IP Source NAT 2 Click Add 3 Enter IP Source NAT Name SNAT 4 Enter Start IP Address 172 16 1 250 Example...

Page 20: ...t of many concurrent users it is advisable to configure multiple SNAT IP addresses One IP address can be used for up to 64 000 flows 8 6 2 APPLY IP SOURCE NAT TO THE VIP 1 Navigate to Config Mode Serv...

Page 21: ...do the following 1 Navigate to Monitor Mode Service SLB Virtual Server 2 Check that the Status states is green Figure 19 Virtual Server status 3 Launch one of the approved web browsers from the lists...

Page 22: ...asic configuration are required Import existing SharePoint webserver SSL cert or create self signed CA from the AX Create one client and one server SSL template On the virtual server change the servic...

Page 23: ...select Self from the from the drop down menu and then enter the following values Common Name SharePoint example com Division A10 Organization A10 Locality San Jose State or Province CA Country USA Em...

Page 24: ...AX Series for SharePoint 2010 Deployment Guide 24 Figure 21 Client SSL Certificate Creation...

Page 25: ...ter a name for the certificate WS 4 Select Local next to Import Certificate from 5 Enter the Certificate Password if applicable 6 Click Browse and navigate to the certificate file Note If you are impo...

Page 26: ...SSL TEMPLATE This section describes how to configure a client SSL template and apply it to the VIP 1 Navigate to Config Mode Service Template SSL Client SSL 2 Click Add 3 Enter the Name Client SSL WS...

Page 27: ...rver SSL Template 9 1 3 ON THE VIRTUAL SERVER CHANGE THE SERVICE TYPE OF THE VIRTUAL PORT FROM TCP TO HTTPS AND APPLY THE NEW CLIENT AND SERVER SSL TEMPLATE 9 1 3 1 CHANGE THE SERVICE TYPE OF THE VIRT...

Page 28: ...SSL template is completed you must bind the Client and Server SSL to the HTTPS VIP Port 443 as follows 1 Navigate to Config Mode SLB Virtual Server 2 Click on the Virtual Server name 3 Select 443 and...

Page 29: ...e burden of processing SSL traffic from the SharePoint web servers Instead of having the SharePoint servers handling these transactions the AX Series decrypts traffic and forwards the traffic to the S...

Page 30: ...eckbox next to a server b Edit the Port from 443 to 80 c Select Update 4 Repeat for each additional server Figure 29 Server Configuration 5 Click OK and then click Save to store your configuration cha...

Page 31: ...e to store your configuration changes 9 2 3 VALIDATE THE DEPLOYMENT To validate that SSL Offload is working navigate to Monitor Mode Service Application SSL Note Browse to the SharePoint site with HTT...

Page 32: ...data transmitted and faster response times to the client Figure 32 HTTP Compression Overview 9 3 1 CREATE HTTP COMPRESSION TEMPLATE 1 Navigate to Config Mode Template Application HTTP 2 Click Add 3 E...

Page 33: ...ide 33 Note The AX device offers various compression levels ranging from levels 1 to 9 Level 1 is the recommended compression setting Figure 34 Compression Configuration Column 5 Click OK and then cli...

Page 34: ...rver Port 1 Navigate to Config Mode SLB Virtual Server 2 Click on the Virtual Server name 3 Select 443 and click Edit 4 Locate the HTTP Template drop down menu and select HTTP Compression to apply the...

Page 35: ...After 9 4 COOKIE PERSISTENCE Cookie persistence provides granularity in comparison to Source IP persistence With cookie persistence the session data is kept within the user s browser 9 4 1 CREATE COO...

Page 36: ...RSISTENCE TEMPLATE TO VIP To apply cookie persistence to the VIP 1 Navigate to Config Mode SLB Virtual Server 2 Click on the Virtual Server name 3 Select 443 and click Edit 4 From the list of AX featu...

Page 37: ...nnections for multiple client requests This reduces the total number of TCP connections to each SharePoint WFE server The advantage of reusing connections is to off load the server TCP stack in order...

Page 38: ...Connection Reuse 2 Click Add 3 Enter the Name SharePoint Connection 4 Click OK and then click Save to store your configuration changes Figure 42 Connection Reuse Overview 9 5 2 CREATE AN IP SOURCE NAT...

Page 39: ...k Edit 4 Locate the Connection Reuse Template drop down list and select SharePoint Connection to apply the connection reuse feature to the virtual server port Figure 43 Connection Reuse Template 5 Loc...

Page 40: ...nection reuse is working properly compare the total current connections of the VIP to the real servers current connections The real server s current connections will be less than the current connectio...

Page 41: ...n Content Size 10 Bytes Max Content Size 4194303 Bytes 6 Click OK and then click Save to store your configuration changes Note The RAM caching policy option is not required unless you have specific da...

Page 42: ...name 3 Select 443 and click Edit 4 Locate the RAM Caching Template drop down list and select SharePoint RAM Caching to apply the RAM caching to the virtual server port Figure 48 RAM Caching Template 5...

Page 43: ...tworks com products axseries aflex_advanced_scripting php Figure 50 Redirect Overview As an example one of the most common aFleX scripts that can be used with SharePoint 2010 server is the HTTP redire...

Page 44: ...rePoint 2010 Deployment Guide 44 Figure 51 aFleX Redirect Configuration Redirect Script Copy and Paste when HTTP_REQUEST HTTP redirect https HTTP host HTTP uri The aFleX script must be bound to Virtua...

Page 45: ...ype HTTP 5 Port 80 Figure 52 VIP Configuration 6 Click OK and then click Save to store your configuration changes 9 7 3 APPLY AFLEX SCRIPT TO VIP 7 Navigate to Config Mode SLB Virtual Server 8 Click o...

Page 46: ...AFLEX SERVICE To verify that the aFleX script is working open a web browser and navigate to http example com The browser will accept the URL request and client URL address will change from http examp...

Page 47: ...bute client traffic seamlessly across multiple SharePoint WFE Servers for site scalability Higher connection throughput faster end user responsiveness and reduce WFE CPU utilization by initiating SSL...

Page 48: ...Dublin interface management ip address 192 168 18 41 255 255 255 0 ip nat pool SNAT 172 16 1 250 172 16 1 250 netmask 24 health monitor SharePoint HC method http slb server WS1 172 16 1 5 port 443 tc...

Page 49: ...m mode advconfig ax2 show run interfaces management enable hostname advconfig ax2 clock timezone Europe Dublin interface management ip address 192 168 18 41 255 255 255 0 ip nat pool SNAT 172 16 1 250...

Page 50: ...template client ssl Client SSL WS cert WS key WS slb template persist cookie SharePoint Cookie slb virtual server WS VIP 172 16 1 200 port 443 https name _172 16 1 200_HTTPS_443 source nat pool SNAT...