For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Virtualrana_132's avatar
Virtualrana_132
Icon for Nimbostratus rankNimbostratus
Nov 07, 2014

HSTS - Header not inserted with iRule

Hi,   Following is my iRule which is attached to $mydomain$ (http) VirtualServer in F5 for HSTS, but it is not inserting the "Strict-Transport-Security" header in the http response. When I run "cu...
Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
Nov 10, 2014

Hello,

 

As your http VS directly answer with a redirect, your HTTP_RESPONSE event is never triggered.

 

You should build your own irule in an HTTP_REQUEST event and use the following command instead :

 

HTTP::respond 302 noserver Location "https://www.domain.org" Strict-Transport-Security "max-age=31536000"

 

BR

 

Yann