ARR Reverse proxy deployment for Lync 2013

Transcription

1 ARR Reverse proxy deployment for Lync 2013 My sip domain called contoso.com. Lync deployment consist of single standard edition server (std.contoso.com), edge server and ARR reverse proxy. Prerequisites for ARR reverse proxy deployment 1. ARR reverse proxy required two NICs on the machine. 2. ARR reverse proxy need not to be part of your domain. 3. Make sure that DNS resolution is working on the machine by using internal DNS or host records. 4. You should request a public UC certificate for reverse proxy server. It should have extweb.contoso.com, meet.contoso.com, dilain.contoso.com, and lyncdiscover.contoso.com and wac.contoso.com part of SAN. 5. Import the certificate on the personal certificate store and make sure that private key is available for the certificate. Following screenshot has the summary of UC certificate request for ARR RP.

2 Installation Steps 6. Open IIS manager. Right click on the default website and select edit binding. Add an https binding and select the UC certificate which you import earlier. 7. Install IIS components by running following PowerShell cmdlet. Import-Module ServerManager Add-WindowsFeature Web-Static-Content,Web-Default-Doc,Web-Dir-Browsing,Web-Http- Errors,Web-Net-Ext,Web-Http-Logging,Web-Request-Monitor,Web-Http-Tracing,Web- Filtering,Web-Stat-Compression,Web-Mgmt-Console,NET-Framework-Core,NET-Win-CFAC,NET- Non-HTTP-Activ,NET-HTTP-Activation,RSAT-Web-Server 8. Open following link and install IIS ARR 2.5 Download and install ttp:// 9. Web platform installer will prompt you for installation, click install now as below;

3 10. Web plat form will download and install ARR 2.5.

4 11. Once installation is completed. You will get a confirmation window as below. Configuration 12. Open IIS manager and right click on server farm and click on create server farm.

5 13. Provide the server farm name as extweb.contoso.com and click next. (Open your topology builder and verify the external web service URL, you need to mention the same URL here) 14. Add server wizard, mention the standard edition server FQDN or Lync Pool VIP/DNS name. Click ADD. 15. Click on advanced settings and expand applicationrequestroute. Change http port to 8080 and https port to Below screenshot may help you.

6 - 15. Click finish, it will prompt for URL rewrite rule creation request. Select YES. 16. We need to create web farm for simple URLs and mobility URLs. Repeat the steps 13 to 15 for meet.contoso.com; dialin.contoso.com; Lyncdiscover.contoso.com and wac.contoso.com.

7 17. Once completed, You should be able to see all server farms for Lync 2013 as below. 18. Now we need to change some of the settings in each server farm. First select dialin.contoso.com farm. Click on caching. 19. Disable disk caching for dialin.contoso.com website. Apply changes.

8 20. Go back to dialin.contoso.com and select proxy from the middle pane. Change the timout value to 200 ms and apply the changes. 21. Go back to dialin.contoso.com and select routing rules. Disable SSL offloading as below. 22. We have successfully completed configuration changes for dialin.contoso.com. Now we have to perform same changes for extweb/meet/lyncdiscover and wac server farm one by one.

9 23. Click on IIS Server home and select URL Rewrite option. 24. You can see both SSL and HTTP rules listed under the URL rewrite page. Delete all rules related to HTTP. If a rule has SSL at the end of the name then you shouldn t delete it.

10 25. Edit the SSL rule one by one. I have selected dialin SSL rule below. Under conditions, click on add and define {HTTP_Host} and add dial.* as pattern as below. Note : Based on the rule selected, pattern will change to meet.* or extweb.* or Lyncdiscover.* etc 26. If you wanted to test the pattern, click on test pattern and type the respective FQDN and test. You will get a success message as below.

11 27. Under action type, you should select route to server farm option. Action properties should list the respective Lync URL (must be https). Also select stop processing of subsequent rules tick mark. 28. For Office web server should add following pattern as seen below. ((?:^en-us/ ^hosting/ ^m/ ^o/ ^oh/ ^op/ ^p/ ^we/ ^wv/ ^x/).*)

12 29. Repeat the steps for meet /lyncdiscover/extweb webfarm. You should select the respective pattern for each web famr. 30. Now you can test the external access and verify the configuration.