Forum Discussion
Virtualrana_132
Nimbostratus
Nov 07, 2014HSTS - Header not inserted with iRule
Hi,
Following is my iRule which is attached to $mydomain$ (http) VirtualServer in F5 for HSTS, but it is not inserting the "Strict-Transport-Security" header in the http response. When I run "cu...
Colin_Stubbs
Altostratus
Dec 01, 2015This can also be caused by Web Acceleration or manual use of iRule CACHE commands.
e.g. HTTP_RESPONSE will not fire on anything pulled from cache.
You can use CACHE_RESPONSE instead. I now use two rules and attach as appropriate.
when HTTP_RESPONSE {
HTTP::header replace Strict-Transport-Security "max-age=31536000; includeSubDomains"
}
And,
when CACHE_RESPONSE {
CACHE::header replace Strict-Transport-Security "max-age=31536000; includeSubDomains"
}
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects