For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Simon_Ecoffey_8's avatar
Simon_Ecoffey_8
Icon for Nimbostratus rankNimbostratus
Mar 12, 2007

Hiding reals servers IP address in http response

Hello,   Is there a way to hide the reals server ip address and port in the http response from bigIP LTM to clients.   Here is the cache output of my internet browser:     Client:HTTP-memo...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Mar 12, 2007
A while back, Deb posted a nice method for removing all instances of a header (it will remove multiple instances of the same header):


when HTTP_RESPONSE {
    strip all instances of the existing headers
   foreach header {X-Cache Via} {
      while { [HTTP::header exists $header] } {
         HTTP::header remove $header
      }
   }
}

You could also remove the Date, Server and X-Powered-By headers to reduce the amount of superfluous info about the web application given back to the client.

Aaron