Cookie encryption on LTM

Hi,

either using an irule or an http profile, the passphrase allow you to encrypt using AES algorithm. It's the same mecanism to encrypt persistence cookies.

When using irules, you can use the embedded command or define your own algorithm.

Hello,

More information in the following article (explanation, profile creation, ...):

https://support.f5.com/kb/en-us/solutions/public/14000/700/sol14784.html

This following article explain and provide you explanation and Irule for cookie encryption:

http://www.thef5guy.com/blog/2010/01/cookie-encryption-using-an-irule/

when RULE_INIT {
 set ::key [AES::key 128]
 }
 when HTTP_RESPONSE {
 set decrypted [HTTP::cookie "MyCookie"]
 HTTP::cookie remove "MyCookie"
 set encrypted [b64encode [AES::encrypt $::key $decrypted]]
 HTTP::cookie insert name "MyCookie" value $encrypted
 }
 when HTTP_REQUEST {
 set encrypted [HTTP::cookie "MyCookie"]
 HTTP::cookie remove "MyCookie"
 set decrypted [AES::decrypt $::key [b64decode $encrypted]]
 HTTP::cookie insert name "MyCookie" value $decrypted
 }