Forum Discussion
Jeff_80625
Nimbostratus
May 18, 2007http header no-cache
I need to create a rule that will send the cache-control directive "no-cache" to the browser so that firefox will not put an SSL page in the bfcache. I can find some help on creating the rule with version 9.x, but does anyone know how to do it with version 4.x?
- hoolio
Cirrostratus
I could be wrong, but I don't believe there is an option to insert HTTP headers in responses in 4.x. Are you able to upgrade the unit to 9.x? - Jeff_80625
Nimbostratus
Our test environment is 4.x, production is 9.x. Not going to be getting test upgraded for a bit, needed to find a way in test to make it work if possible. - hoolio
Cirrostratus
Could you set up a test virtual server on your 9.x production units to test this.when HTTP_RESPONSE { HTTP::header insert my_header_name my_header_value }
- Jeff_80625
Nimbostratus
The application is running on an application server (WebLogic) that is behind a web server (Sun One), both of which are attempting to set the header. - hoolio
Cirrostratus
BIG-IP shouldn't modify cache headers unless you have that configured in the HTTP profile. Are you seeing headers set by the web or app server not being received by the client as they were set? If so, do you have RAM cache enabled on the HTTP profile? - Jeff_80625
Nimbostratus
The problem actually ended up being that the headers being set by the application were not set correctly so that all browsers would be instructed not to cache an SSL protected page. Firefox needs the no-cache directive, Opera needs the must-revalidate directive. The headers were also only being set through meta tags on the page, the application is java and has the ability to use the HttpServletResponse.setHeader() method. Once I got all of that in place the problem was resolved and now none of the popular browsers are caching my SSL pages.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects