[Pound Mailing List] Re: RPC over https

[Pim Zandbergen]

I'm seeing the exact same thing, using Outlook 2007/2010 against 
Exchange 2010
with Pound in between.

Is there some magic Alive/Client/TimeOut value set to make this work 
fluently?

Or is there some way to disable the Outlook tooltip warning?
The tooltip warning is more annoying than the disconnect itself, as the 
reconnect
is immediate.

I'm using a slightly different approach than in this example: Pound is only
proxying /rpc/rpcproxy.dll . Everything else is proxied on another server,
using Apache.

I'm using an HTTP non-SSL backend. Exchange 2010 allows this if you check
"SSL offloading" in the OAW settings.

Thanks,
Pim

CDMB <solarisspar /AT/ gmail.com> wrote:

We have this configure to do do rpc over https for exchange 2010.
However, every few seconds it seconds disconnected and then restored.

The config is:

cat  /etc/pound/pound.cfg
## Minimal sample pound.cfg
##
## see pound(8) for details


######################################################################
## global options:

User            "www-data"
Group           "www-data"
#RootJail       "/usr/share/pound"
#Control "/var/run/pound/ctl_socket"
Grace 3

## Logging: (goes to syslog by default)
##      0       no logging
##      1       normal
##      2       extended
##      3       Apache-style (common log format)
LogLevel 5

## check backend every X secs:
Alive           30

## use hardware-accelleration card supported by openssl(1):
#SSLEngine      "<hw>"

# poundctl control socket
Control "/var/run/pound/poundctl.socket"



ListenHTTP
    Address 0.0.0.0
    Port 80
    Service "sslredir"
        HeadRequire "Host: mail.qadomain1.com"
        Redirect "https://mail.qadomain1.com/owa";
    End
    xHTTP 4
End

ListenHTTPS
    Address 0.0.0.0
AddHeader "Front-End-Https: on"
    Port    443
    Cert    "/etc/pound/CERT.KEY"
    Ciphers 
"ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL"
    MaxRequest 1073741824
    xHTTP   4
    Service "exchange"
        URL
"^/exchange|^/exchweb|^/owa|^/ecp|^/Microsoft-Server-ActiveSync|^/oma|^/"
        HeadRequire "Host: mail.qadomain1.com"
        BackEnd
            Address mail.qadomain1.com
                Port 443
                HTTPS
        End
    End
    Service "rpc"
        URL "^/rpc/rpcproxy\.dll\?"
        HeadRequire "Host: mail.qadomain1.com"
        BackEnd
           Address mail.qadomain1.com
                Port 443
                TimeOut 300
        HTTPS
       End
    End
End


--
To unsubscribe send an email with subject unsubscribe to pound@apsis.ch.
Please contact ro...@apsis.ch for questions.