Forum Discussion
ekanathdas_2662
Nimbostratus
NimbostratusHSTS (HTTP Strict Transport Security)
Hi team, Was trying the HSTS irule posted in "https://devcentral.f5.com/weblogs/d...start.aspx". The vip on port 80 already had a ssl redirect irule (http to https). When the below irule...
ekanathdas_2662Nimbostratus
NimbostratusHi,
I did try the same thing today, but both the http and https connection fails:
iRule for HSTS HTTP Virtuals
when HTTP_REQUEST {
HTTP::respond 301 Location "https://[HTTP::host][HTTP::uri]"
}
iRule for HSTS HTTPS Virtuals
when RULE_INIT {
set static::expires [clock scan 20110926]
}
when HTTP_RESPONSE {
HTTP::header insert Strict-Transport-Security
"max-age=[expr {$static::expires - [clock seconds]}]; \
includeSubDomains"
}
--
Thanks,
Ekanath
