locked
MS CRM 2013 Loadbalancing with SSL Offloading and IFD RRS feed

  • Question

  • Hello,

    currently I am working on a big load balanced deployment and I am a little confused about the ssl offloading. Our datacenter use the riverbed hardware.

    In the offical dokumentation Microsoft explains: "If you are using an NLB solution that uses SSL (Secure Sockets Layer) offloading hardware, you must specify the SSL header in the SSL Header box. Notice that the SSL header is not a URL or domain. It is an agreed upon header value for the HTTP request that is configured on the device that is handling the SSLoffloading. Review the SSL offloading device documentation for the header value."

    So I thought it is a supported way, but then I found the the documentation of f5 which the following explains:

    "SSL Offloading and Microsoft Dynamics CRM for Microsoft
    Outlook Currently, SSL offloading is not supported for the Microsoft Dynamics
    CRM for the Outlook client. If you are deploying CRM for Microsoft Outlook, you
    must configure the BIG-IP system for either unencrypted HTTP client/server
    traffic, or SSL decryption/re-encryption (SSL bridging). Also note that SSL
    offload is not supported for IFD deployments. SSL bridging is mandatory for
    IFD."

    So what is the trues now? I knew it exists issues with outlook, but also with IFD? And how should I deploy it?

    Thank you in advanced

    Daniel

    Monday, January 19, 2015 12:10 PM

Answers

  • Hello,

    I asked in this matter Microsoft for adivec. Just a short answer: SSL Offloading is just for the NLB supported (software load balancing) but is not possible for load balancing with a hardware.

    "https://community.dynamics.com/crm/b/dynamicscrmsupportblog/archive/2012/11/16/issues-with-crm-2011-with-ssl-offloading-using-kemp-loadmaster.aspx - Issues with CRM 2011 with SSL Offloading using Kemp LoadMaster
    So in my humble opinion, I doubt this is not supported although F5 documentation says the opposite."

    Best regards,

    Daniel


    • Marked as answer by Daniel Glab Friday, February 20, 2015 8:09 AM
    • Edited by Daniel Glab Friday, February 20, 2015 8:09 AM
    Friday, February 20, 2015 8:09 AM