Forum Discussion
eng_mohamadawad
Nimbostratus
NimbostratusHSTS - Header not inserted with iRule
Dears;
i enabled the below Irule for owa and Internet bank server (APACHE) ,
iRule for HSTS HTTPS Virtuals
when RULE_INIT {
set static::expires [clock scan 20110926]
}
when HTTP_RESP...
IheartF5_45022
Nacreous
NacreousSTS header is relative from time of delivery, should be for minimum of one year, so there's no need for using [clock seconds] in the calculation - just use a flat value of 31536000 (1 year) and be done with it;-
when HTTP_RESPONSE {
HTTP::header insert Strict-Transport-Security "max-age=31536000; includeSubDomains;"
}