For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

cbrdy's avatar
cbrdy
Icon for Nimbostratus rankNimbostratus
Feb 07, 2014

Health Monitor is creating a new session id on the application

Hi,

 

We have a test jsp page which is setup as a health monitor on the application to check the status of the instances on the F5. This health monitor is causing the application to create a new session everytime and its not expiring the session.

 

I'm new to irules so I want to check in devcentral before I add this in my env. Please let me know if the below code is okay or it needs few tweaks in it.

 

when HTTP_REQUEST {
    set uri [HTTP::uri]

  if { $uri ends_with "check.jsp" } {
    HTTP::cookie remove mysession
  }
 }

4 Replies

  • maybe change the code of the page to not use/create a session on any connection/request to the page...

     

    what platform is serving the jsp's?

     

    • cbrdy's avatar
      cbrdy
      Icon for Nimbostratus rankNimbostratus
      Hi JPV, this jsp is deployed on tomcat
  • We have a test jsp page which is setup as a health monitor on the application to check the status of the instances on the F5. This health monitor is causing the application to create a new session everytime and its not expiring the session.

     

    not sure if i understand correctly but application is the one who creates session when getting request from f5's health monitor, isn't it? so, how can irule address this issue?

     

    am i lost?