For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mjohns2_184959's avatar
mjohns2_184959
Icon for Cirrus rankCirrus
Oct 02, 2015

Cookie Persistence (iRule) Reset Timeout

We have a virtual, with several pools defined in it's iRule. The application owner has the application timeout users in 60 minutes of no activity. They've requested that the load balancer do the same, time out idle sessions after 60 minutes.

Our iRule times out users at 60 minutes of activity or no activity. Is there a way to either resend the cookie with a new timeout or reset the expire time of the existing cookie on the client?

Below is a sample of our iRule

when HTTP_REQUEST {
switch -glob [string tolower [HTTP::uri]] {
    “/example*”
    {
            pool VIPNAME1-POOLNAME
            persist cookie insert cookie "0d 00:60:00"
    }
    “/sample*”
    {
            pool pool VIPNAME-POOLNAME 
            persist cookie insert cookie "0d 00:60:00"
    }
}

}

Thanks MJ

application delivery
devops
iRules

3 Replies

  • IheartF5_45022's avatar
    IheartF5_45022
    Icon for Nacreous rankNacreous
    Oct 02, 2015

    So normally the cookie is inserted in only 1 response - you need the cookie inserted in every response so that it always expires in 60min. Let me know if this works;-

    when HTTP_REQUEST {
    switch -glob [string tolower [HTTP::uri]] {
        “/example*”
        {
            pool VIPNAME1-POOLNAME
        }
        “/sample*”
        {
            pool pool VIPNAME-POOLNAME 
        }
    }
    persist cookie insert cookie "0d 00:60:00"
    set cname "BIGipServer[LB::server pool]"

    if {[HTTP::cookie exists "BIGipServer[LB::server pool]"} {
         Save the current cookie value
        set cvalue [HTTP::cookie $cname]
    } 
}

when HTTP_RESPONSE {
   if {![HTTP::cookie exists $cname]} {
         If there is no cookie in this response already,  insert one
        HTTP::header insert Set-Cookie "$cname=$cvalue; Path=/; Max-Age=3600; HttpOnly
   }
}
  • Mohamed_Lrhazi's avatar
    Mohamed_Lrhazi
    Icon for Altocumulus rankAltocumulus
    Oct 02, 2015

    Check your cookie persistence profile, recent versions have the option to enable this feature there.