HTTP Profile "Maximum Header Size"

Rephrase my second question:

 

Any disadvantage of this iRule?

 

 

I have talk to an engineer regarding to implement this iRule, I need you advice as he mentioned:

 

1)When thought about this logically you shouldnt be able to analyze a http request exeeding the maximum header size allowed using an iRule, when maximum http header size is exeeded F5 simply drop that request and send a RST to the client.

 

2)Not able to analyze such requests using an irule. because if F5 has the capablity of analyzing HTTP requests exeeding the maximum header size, whats the point of defining a maximum header size in the first place.

 

 

Would like to check with you on the traffic flow in F5,

 

1)when traffic reach F5, it will checked by iRule.

 

2) iRule will do necessary iRule check. reject/forwarding if specified in iRule.

 

3)Traffic reaches Virtual Server which associate with HTTP profile.

 

4) HTTP profile will then check on the HTTP header size and it will decide allow or send RST to client.

 

 

Am I correct? :)

 

 

Thanks in advance.

 

chiewming

 

 

 

Thanks,

 

chiewming