For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jeff_80625's avatar
Jeff_80625
Icon for Nimbostratus rankNimbostratus
May 18, 2007

http header no-cache

I need to create a rule that will send the cache-control directive "no-cache" to the browser so that firefox will not put an SSL page in the bfcache. I can find some help on creating the rule with ve...
application delivery
dev
devops
iRules
v4
Jeff_80625's avatar
Jeff_80625
Icon for Nimbostratus rankNimbostratus
May 21, 2007
The application is running on an application server (WebLogic) that is behind a web server (Sun One), both of which are attempting to set the header.

 

 

The problem we are having is that even though pages are protected by SSL the "cache-control: no-cache" HTTP header is not being set so firefox and IE7 are caching the pages. We absolutely do not want caching to happen for these pages.

 

 

In my development environment - where there is not F5 LB - even though the application is trying to set the header I had to change the web server config so that the header was being set. I assumed that since the browser is talking to the F5, even though both the web and app servers are attempting to set the header, only the F5 can actually do so.