For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Virtualrana_132's avatar
Virtualrana_132
Icon for Nimbostratus rankNimbostratus
Nov 07, 2014

HSTS - Header not inserted with iRule

Hi,   Following is my iRule which is attached to $mydomain$ (http) VirtualServer in F5 for HSTS, but it is not inserting the "Strict-Transport-Security" header in the http response. When I run "cu...
Virtualrana_132's avatar
Virtualrana_132
Icon for Nimbostratus rankNimbostratus
Nov 11, 2014

Hi Guys,

 

It was my lack of understanding about how the iRules were triggering.

 

Both Yann and bepsoccer are correct, that HTTP_RESPONSE event was never triggered and needed to have the Separate iRule attached to https VS with the following .

 

when HTTP_RESPONSE { HTTP::header insert Strict-Transport-Security "max-age=15552000; includeSubDomains" }

 

Really appreciate your help guys.

 

Thank you

 

Rana