For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

bluestar007_339's avatar
bluestar007_339
Icon for Nimbostratus rankNimbostratus
Nov 05, 2017

Changing headers

Hi, If I want to change header part (for eg:Strict-Transport-Security) ,Where do I change exactly . Do we need to create separate irule for this ?   Thanks  
application delivery
BIG-IP
Simon_Blakely's avatar
Simon_Blakely
Icon for Employee rankEmployee
Nov 05, 2017

For HSTS, you need to either use the HTTP profile option (from v12 on), or insert the header in the HTTP_RESPONSE method of an irule.

 

You can do this in a separate irule, but you need to co-ordinate with the existing irules - sometimes an operation in one irule can mean that another change is no longer possible, and may even cause an error that terminates the connection.

 

https://devcentral.f5.com/articles/implementing-http-strict-transport-security-in-irules