HSTS (HTTP Strict Transport Security)

Hi,

 

I did try the same thing today, but both the http and https connection fails:

 

 

iRule for HSTS HTTP Virtuals

 

when HTTP_REQUEST {

 

HTTP::respond 301 Location "https://[HTTP::host][HTTP::uri]"

 

}

 

 

iRule for HSTS HTTPS Virtuals

 

 

when RULE_INIT {

 

set static::expires [clock scan 20110926]

 

}

 

when HTTP_RESPONSE {

 

HTTP::header insert Strict-Transport-Security

 

"max-age=[expr {$static::expires - [clock seconds]}]; \

 

includeSubDomains"

 

}

 

 

--

 

Thanks,

 

Ekanath