Forum Discussion

MattNears's avatar
MattNears
Icon for Nimbostratus rankNimbostratus
Oct 02, 2019

HTTP Header responce problem

Good Morning, I have an issue with some of my response headers and an irule for replacing certain responses. The rule I have below is set agains a number of our sites but when running a header respo...
iRules
security
  • Enes_Afsin_Al's avatar
    Enes_Afsin_Al
    Oct 02, 2019

    Hi MattNears,

    If server's response contains "Server" header or "X-Powered-By" header or other headers in the iRule, "Server" and "X-Powered-By" headers will come back with the actual server and IIS details. You should use "else" blocks and HTTP::header replace command.

    if { !([HTTP::header exists "Server"]) } {
	HTTP::header insert "Server" "A-Server"
} else {
	HTTP::header replace "Server" "A-Server"
}
MattNears's avatar
MattNears
Icon for Nimbostratus rankNimbostratus
Oct 02, 2019

As a side note to the above I do occasionally have issues where the set secure cookie comes back with a "no prefix" and "not a samesite" cookie error,

Set-CookieASP.NET_SessionId=br3sthsomuihmjyey4xkqmh5; path=/; HttpOnly;Secure

do I need to adjust the first line so all cookies are set as secure?