For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dale_Parish_257's avatar
Dale_Parish_257
Icon for Nimbostratus rankNimbostratus
Dec 05, 2016

Connection header stripped on response

Hi,

 

Just a quick question - is it normal that header called "Connection" would be stripped out on response to the browser? I disabled all iRules we have implemented to no effect - just wondering if there is something else that could be stripping this out?

 

Thanks in advance

 

Dale

 

BIG-IP
devops
iRules

3 Replies

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Dec 05, 2016

    This is the Connection response header? As in

    Connection: close

    You're setting this at the application server and not seeing it at the browser?

    Do you have an HTTP profile attached to the VIP? And if so, any custom settings?

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Dec 05, 2016

    May I ask what that custom Connection value is? RFC2616 only defines the close header for the response Connection header.

     

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Dec 05, 2016

    Okay, just as a sanity check I set up a simple PHP web server to send a few different headers through a simple BIG-IP reverse proxy VIP, with generic HTTP profile attached.

    I see all of the headers coming through to the client, including Connection: Upgrade.

    How are you verifying the missing Connection header? In a capture? And if so, where?

    Try adding this simple iRule

    when HTTP_RESPONSE_RELEASE {
    foreach x [HTTP::header names] {
        log local0. "header($x) = [HTTP::header $x]"
    }
}

    and then tail the LTM log from the command line

    tail -f /var/log/ltm