Forum Discussion
HTTP header (3XXXX) exceeded maximum allowed size of 3XXXX - Irule Problem
Hello Friends
I'm having these errors about "HTTP Header Exceeded maximmum allowed size":
Feb 6 15:49:59 BOGEAWF5LTMP01 err tmm[11181]: 011f0005:3: HTTP header (36400) exceeded maximum allowed size of 36000 (Client side: vip=/Common/VS_PX_IGUANA profile=http pool=/Common/Proxy_Pool client_ip=10.162.153.36) Feb 6 15:50:02 BOGEAWF5LTMP01 err tmm[11181]: 011f0005:3: HTTP header (36400) exceeded maximum allowed size of 36000 (Client side: vip=/Common/VS_PX_IGUANA profile=http pool=/Common/Proxy_Pool client_ip=10.162.153.36) Feb 6 15:50:06 BOGEAWF5LTMP01 err tmm1[11181]: 011f0005:3: HTTP header (36400) exceeded maximum allowed size of 36000 (Client side: vip=/Common/VS_PX_IGUANA profile=http pool=/Common/Proxy_Pool client_ip=10.162.153.36)
I did search info about that error, and i found an Irule in this Link: https://devcentral.f5.com/questions/http-profile-maximum-header-size
The Irule is following:
when HTTP_REQUEST {
Check the total HTTP headers size
if {[string length [HTTP::request]] > 10000 }{
Check if the URI is very long
if {[string length [HTTP::uri]] > 1000}{
log local0. "Uri is long. Length [string length [HTTP::uri]], URI: [HTTP::uri]"
Exit this event from this iRule
return
}
Loop through the headers by name
foreach header {[HTTP::header names]} {
Check for a long header value
if {[string length [HTTP::header value $header]] > 1000 } {
log local0. "Header is long. Header Name: $header,\
Length: [string length [HTTP::header value $header]], Value: [HTTP::header value $header]"
Exit this event from this iRule
return
}
}
If we are still here the request was large, but not the URI or any single header.
Log the first 1k bytes of the full request
log local0. "Request is long: [HTTP::request]"
}
}
I used this irule to log the header values, but this irule affects the HTTPS connections that not terminating in the F5. I am balancing two Bluecoat Proxies but the SSL interception is being done in the Proxies directly. You can help me with a modification from this irule to avoid this behavior?
2 Replies
- Mauricio_Garant
Nimbostratus
I Modified the template irule to log the HTTP Headers that exceeded the 36000 allowed header size. The irule blocks HTTPS connections, I don´t know why. - iaine
Nacreous
Could you increase the max header side in the http profile for this VIP...?
https://support.f5.com/kb/en-us/solutions/public/8000/400/sol8482.html
If you are doing any L7 inspection without SSL decrypt then you are going to kill the session on the F5
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com