For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jeff_80625's avatar
Jeff_80625
Icon for Nimbostratus rankNimbostratus
May 18, 2007

http header no-cache

I need to create a rule that will send the cache-control directive "no-cache" to the browser so that firefox will not put an SSL page in the bfcache. I can find some help on creating the rule with ve...
application delivery
dev
devops
iRules
v4
Jeff_80625's avatar
Jeff_80625
Icon for Nimbostratus rankNimbostratus
May 23, 2007
The problem actually ended up being that the headers being set by the application were not set correctly so that all browsers would be instructed not to cache an SSL protected page. Firefox needs the no-cache directive, Opera needs the must-revalidate directive. The headers were also only being set through meta tags on the page, the application is java and has the ability to use the HttpServletResponse.setHeader() method. Once I got all of that in place the problem was resolved and now none of the popular browsers are caching my SSL pages.