Forum Discussion
gpoverland
Nimbostratus
NimbostratusF5 iRule Example integrating HMAC
I currently utilize a static key value to create a custom encrypted cookie to validate user session authenticity via cookie values. I would like to move over to using an HMAC solution, but having iss...
gpoverlandNimbostratus
NimbostratusWOW! nicely done.. will get back to playing on this next week, but for now.. Great work.
Kai_Wilke
MVP
MVPYou're welcome!
FYI: In the meantime I was able to cutoff additional 20% overhead for the per-request verification. It takes now roughly 65k CPU clicks to verify a single HMAC protected HTTP request (while holding an HMAC cache bucket of ~1million unique HMAC tokens). I'm currently still collecting some real-world experiences with this code, but I'm trying to publish an updated version at the end of the week to the CodeShare. Are you fine when I include some credits for you as the origin of this lovely idea? ;-)
Cheers, Kai