For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Julian_Grunnell's avatar
Julian_Grunnell
Icon for Nimbostratus rankNimbostratus
Jun 13, 2007

Cookie Rewrite & ASPSESSIONID Mk. II

Hi - well looks like my previous post got foobar'd somehow. Anyway thanks to willms & hoolio for their valuable input!!     I amended willms iRule slightly to:     when HTTP_RESPONSE { ...
application delivery
dev
devops
iRules
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Jun 13, 2007
I also saw occassional issues with cookie persistence, so I use the session table to build the backend pool member reference from the sessionID. Maybe not the most efficient way, but I don't have any issues with it.


   when HTTP_RESPONSE {
    if { [HTTP::cookie exists "ASPSESSIONID"] } {
      if { [session lookup uie [findstr [HTTP::cookie names] "ASPSESSIONID" 12 20]] equals "" } {
        session add uie $sessionID [IP::server_addr] 1800
        log local0. "added server entry [session lookup uie [findstr [HTTP::cookie names] "ASPSESSIONID" 12 20]]\
          for aspsessionID [findstr [HTTP::cookie names] "ASPSESSIONID" 12 20] "
      } else {
        log local0. "existing server entry [session lookup uie [findstr [HTTP::cookie names] "ASPSESSIONID" 12 20]]\
         for aspsessionID [findstr [HTTP::cookie names] "ASPSESSIONID" 12 20]"
      }
    }
  }
  when HTTP_REQUEST {
    if { [HTTP::cookie exists "ASPSESSIONID"] } {
      if { !([session lookup uie [findstr [HTTP::cookie names] "ASPSESSIONID" 12 20]] equals "") } {
        pool [LB::server pool] member [session lookup uie [findstr [HTTP::cookie names] "ASPSESSIONID" 12 20]]
        log local0. "aspsessionID [findstr [HTTP::cookie names] "ASPSESSIONID" 12 20] 
          \sent to [session lookup uie [findstr [HTTP::cookie names] "ASPSESSIONID" 12 20]]"
      } else {
        pool [LB::server pool]
        log local0. "No aspsession ID, load balancing the connection..."
      }
    }
  }