Citrix XML Service SSL offloading on IIS

Configure SSL offloading on IIS Default web site and forward the request to Citrix XML services listening on port 80

Author: matt6697

files/iis_requestRouter_amd64.msi

@@ -56,4 +56,37 @@
 	  require => File["C:\\Program Files\\WindowsPowerShell\\Modules\\sqlserver_powershell_21.0.17199.zip"]
   }
 
+  #Install IIS addons required for Citrix XML service offloading to IIS.
+  dsc_file{ 'IISaddons':
+		dsc_destinationpath => 'C:\IISaddons',
+		dsc_type => 'Directory',
+		dsc_ensure => 'Present'  
+  }
+  
+  file{ "C:\\IISaddons\\iis_rewrite_amd64_en-US.msi":
+		source => 'puppet:///modules/xd7mastercontroller/iis_rewrite_amd64_en-US.msi',
+		source_permissions => ignore,
+    require => File['IISaddons']
+  }->
+  
+  dsc_package{'iis_rewrite_amd64_en-US':
+    dsc_ensure    => 'Present',
+    dsc_name      => 'IIS URL Rewrite Module 2',
+    dsc_productid => '38D32370-3A31-40E9-91D0-D236F47E3C4A',
+    dsc_path      => 'C:\\IISaddons\\iis_rewrite_amd64_en-US.msi',
+  }
+  
+  file{ "C:\\IISaddons\\iis_requestRouter_amd64.msi":
+    source => 'puppet:///modules/xd7mastercontroller/iis_requestRouter_amd64.msi',
+    source_permissions => ignore,
+    require => File['IISaddons']
+  }->
+  
+  dsc_package{'iis_rewrite_amd64_en-US':
+    dsc_ensure    => 'Present',
+    dsc_name      => 'Microsoft Application Request Routing 3.0',
+    dsc_productid => '279B4CB0-A213-4F94-B224-19D6F5C59942',
+    dsc_path      => 'C:\\IISaddons\\iis_requestRouter_amd64.msi',
+  }
+  
 }

files/iis_rewrite_amd64_en-US.msi

@@ -1,5 +1,6 @@
 class xd7mastercontroller::sslconfig inherits xd7mastercontroller {
   if $https {
+    #Donwload and import SSL certificate in WebHosting store
     dsc_file{ 'SSLCert':
       dsc_sourcepath => $sslCertificateSourcePath,
       dsc_destinationpath => 'c:\SSL\cert.pfx',
@@ -14,7 +15,8 @@
       dsc_credential => {'user' => 'cert', 'password' => $sslCertificatePassword },
       require => Dsc_file['SSLCert']
     }
-
+    
+    #Configure IIS HTTPS binding (remove HTTP binding)
     dsc_xwebsite{ 'DefaultWebSite': 
       dsc_name => 'Default Web Site',
       dsc_physicalpath => 'C:\inetpub\wwwroot',
@@ -27,11 +29,18 @@
       require => Dsc_xpfximport['ImportSSLCert']
     }
 
-	registry_value { 'HKLM\SOFTWARE\Citrix\DesktopServer\XmlServicesSslPort':
-	  ensure => present,
-	  type   => 'dword',
-	  data   => '443',
-	  require => Dsc_xd7features ['XD7DeliveryController']
-	}
+    #Configure SSL offloading on IIS Default web site and forward the request to Citrix XML services listening on port 80
+    file{'c:/inetpub/wwwroot/web.config':
+      ensure  => file,
+      content => template('xd7mastercontroller/web.config.erb')  
+    }
+    
+		#Configure Citrix XML Service SSL port
+		registry_value { 'HKLM\SOFTWARE\Citrix\DesktopServer\XmlServicesSslPort':
+		  ensure => present,
+		  type   => 'dword',
+		  data   => '443',
+		  require => Dsc_xd7features ['XD7DeliveryController']
+		}
   }   
 }

manifests/install.pp

@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<configuration>
+    <system.webServer>
+        <rewrite>
+            <rules>
+                <rule name="ReverseProxyInboundRule1" stopProcessing="true">
+                    <match url="(.*)" />
+                    <action type="Rewrite" url="http://<%= @fqdn %>/{R:1}" />
+                </rule>
+            </rules>
+        </rewrite>
+    </system.webServer>
+</configuration>