Forum Discussion

gpoverland's avatar
gpoverland
Icon for Nimbostratus rankNimbostratus
Feb 03, 2016

F5 iRule Example integrating HMAC

I currently utilize a static key value to create a custom encrypted cookie to validate user session authenticity via cookie values. I would like to move over to using an HMAC solution, but having iss...
iRules
LTM
security
gpoverland's avatar
gpoverland
Icon for Nimbostratus rankNimbostratus
Feb 11, 2016

Nice.. I like what you did there. Instead of rejecting the session, you just deleted the app cookie forcing a new login.. like I do! interesting you mention the TMM caches.. I was just reading into it and other options. I am concerned that this per HTTP request verification will negatively impact overall performance. I'm open to suggestions..