F5Networks / f5-appsvcs-templates

F5 BIG-IP Application Service Templates (FAST)
Apache License 2.0
32 stars 13 forks source link

Exchange template fails to create an http profile #132

Closed bdreis01 closed 1 year ago

bdreis01 commented 1 year ago

Hello Pleas excuse if this is not the place to post this issue. This is not on the /common partition

LTM version 17.0.0.1 Templates version 3.39.0 AS3 1.20.0

Error: 01071912:3: HTTP_REQUEST event in rule (/VBGOV/Exch_owa_prod/Exch_owa_prod_combined_pool_irule3) requires an associated HTTP or FASTHTTP profile on the virtual-server (/VBGOV/Exch_owa_prod/Exch_owa_prod_vs).

Debug view below:

WARNING: The below declaration is only for inspection and debug purposes. Submitting the below ouput to AS3 directly can result in loss of tenants and applications. Please only submit this declaration through FAST.

{ "class": "ADC", "schemaVersion": "3.0.0", "id": "urn:uuid:a858e55e-bbe6-42ce-a9b9-0f4ab33e3bf7", "VBGOV": { "class": "Tenant", "Exch_owa_prod": { "class": "Application", "template": "generic", "Exch_owa_prod_vs": { "virtualAddresses": [ "10.100.206.43" ], "virtualPort": 443, "class": "Service_TCP", "profileHTTP": { "use": "Exch_owa_prod_http" }, "persistenceMethods": [], "snat": "auto", "profileHTTPAcceleration": { "use": "Exch_owa_prod_cache-optimize" }, "profileHTTPCompression": { "use": "Exch_owa_prod_wan-optimized-compression" }, "redirect80": false, "iRules": [ { "use": "Exch_owa_prod_owa_redirect_irule3" }, { "use": "Exch_owa_prod_combined_pool_irule3" }, { "use": "Exch_owa_prod_samesite_irule" } ], "profileTCP": "normal" }, "exchangeVS_ad_pool": { "class": "Pool", "members": [ { "serverAddresses": [ "10.100.223.60", "10.100.223.61" ], "servicePort": 443, "shareNodes": true } ], "loadBalancingMode": "least-connections-member", "slowRampTime": 300, "monitors": [ { "use": "exchangeVS_ad_https_monitor" } ], "minimumMonitors": 1 }, "exchangeVS_as_pool": { "class": "Pool", "members": [ { "serverAddresses": [ "10.100.223.60", "10.100.223.61" ], "servicePort": 443, "shareNodes": true } ], "loadBalancingMode": "least-connections-member", "slowRampTime": 300, "monitors": [ { "use": "exchangeVS_as_https_monitor" } ], "minimumMonitors": 1 }, "exchangeVS_ews_pool": { "class": "Pool", "members": [ { "serverAddresses": [ "10.100.223.60", "10.100.223.61" ], "servicePort": 443, "shareNodes": true } ], "loadBalancingMode": "least-connections-member", "slowRampTime": 300, "monitors": [ { "use": "exchangeVS_ews_https_monitor" } ], "minimumMonitors": 1 }, "exchangeVS_mapi_pool": { "class": "Pool", "members": [ { "serverAddresses": [ "10.100.223.60", "10.100.223.61" ], "servicePort": 443, "shareNodes": true } ], "loadBalancingMode": "least-connections-member", "slowRampTime": 300, "monitors": [ { "use": "exchangeVS_mapi_https_monitor" } ], "minimumMonitors": 1 }, "exchangeVS_owa_pool": { "class": "Pool", "members": [ { "serverAddresses": [ "10.100.223.60", "10.100.223.61" ], "servicePort": 443, "shareNodes": true } ], "loadBalancingMode": "least-connections-member", "slowRampTime": 300, "monitors": [ { "use": "exchangeVS_owa_https_monitor" } ], "minimumMonitors": 1 }, "exchangeVS_ad_https_monitor": { "class": "Monitor", "interval": 10, "timeout": 31, "monitorType": "http", "send": "GET /autodiscover/healthcheck.htm HTTP/1.1\r\nHost: vbgov.com\r\nConnection: Close\r\n\r\n", "receive": "200 OK" }, "exchangeVS_as_https_monitor": { "class": "Monitor", "interval": 10, "timeout": 31, "monitorType": "http", "send": "GET /Microsoft-Server-Activesync/healthcheck.htm HTTP/1.1\r\nHost: vbgov.com\r\nConnection: Close\r\n\r\n", "receive": "200 OK" }, "exchangeVS_ews_https_monitor": { "class": "Monitor", "interval": 10, "timeout": 31, "monitorType": "http", "send": "GET /EWS/healthcheck.htm HTTP/1.1\r\nHost: vbgov.com\r\nConnection: Close\r\n\r\n", "receive": "200 OK" }, "exchangeVS_owa_https_monitor": { "class": "Monitor", "interval": 10, "timeout": 31, "monitorType": "http", "send": "GET /owa/healthcheck.htm HTTP/1.1\r\nHost: vbgov.com\r\nConnection: Close\r\n\r\n", "receive": "200 OK" }, "exchangeVS_mapi_https_monitor": { "class": "Monitor", "interval": 10, "timeout": 31, "monitorType": "http", "send": "GET /MAPI/healthcheck.htm HTTP/1.1\r\nHost: vbgov.com\r\nConnection: Close\r\n\r\n", "receive": "200 OK" }, "Exch_owa_prod_http": { "class": "HTTP_Profile", "xForwardedFor": true, "hstsInsert": false, "hstsIncludeSubdomains": true, "hstsPreload": true }, "Exch_owa_prod_cache-optimize": { "parentProfile": { "bigip": "/Common/optimized-caching" }, "class": "HTTP_Acceleration_Profile", "uriIncludeList": [ "." ], "uriExcludeList": [ "/owa/ev.owa", "oab.xml" ] }, "Exch_owa_prod_wan-optimized-compression": { "class": "HTTP_Compress", "contentTypeIncludes": [ "text/(css | html | javascript | json | plain | postscript | richtext | rtf | vnd.wap.wml | vnd.wap.wmlscript | wap | wml | x-component | x-vcalendar | x-vcard | xml) ", "application/(css | css-stylesheet | doc | excel | javascript | json | lotus123 | mdb | mpp | ms-excel | ms-powerpoint | ms-word | msaccess | msexcel | mspowerpoint | msproject | msword | photoshop | postscript | powerpoint | ps | psd | quarkexpress | rtf | txt | visio | vnd.excel | vnd.ms-access | vnd.ms-excel | vnd.ms-powerpoint | vnd.ms-pps | vnd.ms-project | vnd.msword | vnd.ms-works | vnd.ms-works-db | vnd.msaccess | vnd.msexcel | vnd.mspowerpoint | vnd.msword | vnd.powerpoint | vnd.visio | vnd.wap.cmlscriptc | vnd.wap.wmlc | vnd.wap.xhtml+xml | vnd.word | vsd | winword | wks | word | x-excel | x-java-jnlp-file | x-javascript | x-json | x-lotus123 | x-mdb | x-ms-excel | x-ms-project | x-mscardfile | x-msclip | x-msexcel | x-mspowerpoint | x-msproject | x-msword | x-msworks-db | x-msworks-wps | x-photoshop | x-postscript | x-powerpoint | x-ps | x-quark-express | x-rtf | x-vermeer-rpc | x-visio | x-vsd | x-wks | x-word | x-xls | x-xml | xhtml+xml | xls | xml) ", "image/(photoshop | psd | x-photoshop | x-vsd)" ] }, "Exch_owa_prod_combined_pool_irule3": { "class": "iRule", "iRule": "when HTTP_REQUEST {\n switch -glob -- [string tolower [HTTP::path]] { \n "/microsoft-server-activesync" {\n TCP::idletime 1800\n pool exchangeVS_as_pool\n COMPRESS::disable\n CACHE::disable\n return\n } \n "/owa" {\n \n pool exchangeVS_owa_pool\n return\n }\n "/ecp" {\n \n pool exchangeVS_owa_pool\n return\n } \n "/ews" {\n pool exchangeVS_ews_pool\n COMPRESS::disable\n CACHE::disable\n return\n }\n "/oab" {\n pool exchangeVS_ews_pool\n persist none\n return\n } \n "/mapi" {\n pool exchangeVS_mapi_pool\n COMPRESS::disable\n CACHE::disable\n return\n } \n "/autodiscover" {\n pool exchangeVS_ad_pool\n persist none\n return\n } \n default {\n pool exchangeVS_owa_pool\n } \n }\n}\nwhen HTTP_RESPONSE {\n \n if {[HTTP::header exists "Transfer-Encoding"]} {\n HTTP::payload rechunk\n }\n}" }, "Exch_owa_prod_samesite_irule": { "class": "iRule", "iRule": { "base64": "d2hlbiBIVFRQX1JFU1BPTlNFX1JFTEVBU0UgewogICAgZm9yZWFjaCBteWNvb2tpZSBbSFRUUDo6Y29va2llIG5hbWVzXSB7CiAgICAgICAgSFRUUDo6Y29va2llIHNlY3VyZSAkbXljb29raWUgZW5hYmxlCiAgICB9Cn0=" } }, "Exch_owa_prod_owa_redirect_irule3": { "class": "iRule", "iRule": "priority 900\nwhen HTTP_REQUEST {\n if { ([HTTP::uri] == "/") } {\n HTTP::redirect https://[HTTP::host]/owa/\n }\n}" } } } }

shyawnkarim commented 1 year ago

Thanks for reporting this issue. We are now tracking it internally with ID, EC-215.

joelkeener commented 1 year ago

I have attached a templateset with an Exchange template that you can install to test a solution for deploying it without a TLS Server profile.

The missing HTTP profile error was misleading, because it was there, but it was ignored by the TCP virtual servers it was creating. Now we create an HTTP virtual server so the deployment works.

Please let us know if the deployment works for you. bigip-fast-templates_with-fixed-exchange.zip

shyawnkarim commented 1 year ago

@bdreis01 if you have trouble getting the file, please feel free to email me at s.karim@f5.com and I can send it to you directly.

joelkeener commented 1 year ago

@bdreis01 this Exchange fix is going to be released in FAST v1.25.0 but please let us know if you were able to test it by installing the attached template set already.

bdreis01 commented 1 year ago

Joel, I will get this installed next week some time and let you know. Thanks, Bill

shyawnkarim commented 1 year ago

Closing. This issue was resolved with Release 1.25.0.