Enforcing Content-Length and other preventive security measures

You could potentially handle some HTTP protocol validation in an iRule, but you'd probably need to parse the raw TCP (as opposed to using HTTP::commands) as you're looking for invalid HTTP or corner cases in the use of the protocol. If it's an option for you, the Application Security Manager (ASM) would provide much better validation of HTTP and add a lot more flexibility and ease than you could ever get to with an iRule. You can check with an F5 salesperson to get more information on the functionality ASM offers. I think you'll find it meets or exceeds what you're trying to achieve.

 

 

Aaron