Forum Discussion
pedinopa_170325
Nimbostratus
NimbostratusHSTS via irule
I have 2 irules. 1 for HTTP HSTS and the other for HTTPS HSTS. they insert the headers but hsts is not enabled. I am running 11.5.4 so the HSTS config is not in my HTTP profile, how can I enable it...
kolom
Altostratus
AltostratusHello pedinopa,
You should enable HSTS only on virtual servers with client SSL profiles.You can enable HSTS on HTTPS Virtual server using the below iRule.
when HTTP_RESPONSE {
if { !([ HTTP::header exists "Strict-Transport-Security“ ])}
{ HTTP::header insert "Strict-Transport-Security" "16070400" }
}
pedinopa_170325Nimbostratus
Nimbostratusaccording to ssllabs the HSTS headers are there but not enabled. I tried the irule you suggested did not make a difference.
