Reverse Proxy for Exchange 2010 Outlook Anywhere (RPC over HTTPS)

Server NGINX
1

Hi,

Ngnix has been configured as a reverse Proxy for an Exchange2010-Server
(for OWA (Outlook Web Access) and Microsoft-Active-Sync). This works
great. But I also want to use nginx for Outlook Anywhere (RPC over
HTTPS). But this doesn’t work.

This my nginx.conf

user www-data;
worker_processes 4;
error_log /var/log/nginx/error.log;
pid /var/run/nginx.pid;
events {
worker_connections 1024;
}
http {
include /etc/nginx/mime.types;
default_type application/octet-stream;
access_log /var/log/nginx/access.log;
server_names_hash_bucket_size 64;
sendfile on;
tcp_nopush on;
keepalive_timeout 65;
tcp_nodelay on;
gzip on;
gzip_comp_level 5;
gzip_http_version 1.0;
gzip_min_length 0;
gzip_types text/plain text/css image/x-icon application/x-javascript;
gzip_vary on;
include /etc/nginx/conf.d/*.conf;
include /etc/nginx/sites-enabled/*;
}

and my owa.conf under site-available

server {
        listen       80;
        server_name mail.externalDomain.com;

        # Redirect any HTTP request to HTTPS
        rewrite ^(.*) https://mail.externalDomain.com $1 permanent;

        error_log  /var/log/nginx/owa-error.log;
        access_log /var/log/nginx/owa-access.log;
}

server {
        listen       443;
        server_name mail.externalDomain.com;

        # Redirect from "/" to "/owa" by default
          rewrite ^/$ https:// mail.externalDomain.com/owa permanent;

        # Enable SSL
        ssl                     on;
        ssl_certificate         /etc/nginx/ssl.crt/exchange.crt;
        ssl_certificate_key     /etc/nginx/ssl.key/exchange.key;
        ssl_session_timeout     5m;

        # Set global proxy settings
        proxy_read_timeout      360;

        proxy_pass_header       Date;
        proxy_pass_header       Server;

        proxy_set_header        Host $host;
        proxy_set_header        X-Real-IP $remote_addr;
        proxy_set_header        X-Forwarded-For 
$proxy_add_x_forwarded_for;

        location ~* ^/owa      { proxy_pass https://exchange2010.local; 
}
        location ~* ^/Microsoft-Server-ActiveSync { proxy_pass 
https://exchange2010.local; }
        location ~* ^/ecp { proxy_pass https://exchange2010.local; }
        location ~* ^/Rpc { proxy_pass https://exchange2010.local; }
        location ~* ^/mailarchiver { proxy_pass 
https://mailarchiver.local; }
        error_log /var/log/nginx/owa-ssl-error.log;
        access_log /var/log/nginx/owa-ssl-access.log;
}

server {
        listen       443;
        server_name autodiscover.externalDomain.com;

        # Enable SSL
        ssl                     on;
        ssl_certificate         /etc/nginx/ssl.crt/exchange.crt;
        ssl_certificate_key     /etc/nginx/ssl.key/exchange.key;
        ssl_session_timeout     5m;

        # Set global proxy settings
        proxy_read_timeout      360;

        proxy_pass_header       Date;
        proxy_pass_header       Server;

        proxy_set_header        Host $host;
        proxy_set_header        X-Real-IP $remote_addr;
        proxy_set_header        X-Forwarded-For 
$proxy_add_x_forwarded_for;

        location ~* ^/Autodiscover { proxy_pass 
https://exchange2010.local; }

        error_log /var/log/nginx/owa-ssl-error.log;
        access_log /var/log/nginx/owa-ssl-access.log;
}

Now if I open the internal URL of Rpc with my Browser i become an
authentication, after i have me successful authorized i become a blank
site.
if I open the external URL of Rpc with my Browser i become an
authentication, after i have me successful authorized i become a “502
Bad Gateway” Error from ngnix.

Has anyone a solution for it?

Another question is it is possible to set nginx case insensitive globe
for all locations? Because I can’t use ~* for this example.

location ~* ^/mailarchiver { proxy_pass 
https://exchange2010.local/mailarchiver3; }

So I hope u understand my English but is a long time ago that I have to
use it.

Thx and regards

Posted at Nginx Forum: