For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

tarsier_90410's avatar
tarsier_90410
Icon for Nimbostratus rankNimbostratus
Oct 17, 2011

HTTP::respond - bug or improper use?

When using HTTP::respond 302 Location "https://<...>" in the HTTP_RESPONSE when the server also issued a 302, the LTM's 302 does not appear to work and the client receives the location specified by th...
application delivery
dev
devops
iRules
tarsier_90410's avatar
tarsier_90410
Icon for Nimbostratus rankNimbostratus
Oct 17, 2011
The significant difference is that I am doing the redirect in the HTTP_RESPONSE event, and also setting cookies, for a server response that sets a particular header... 


when HTTP_RESPONSE {
if { [HTTP::header exists "status"] } {
switch [HTTP::header value "status"] {
"OK" {
HTTP::respond 302 Location "https://$HOSTNAME$URI" "Set-Cookie" $MY_COOKIE
return
}
... other cases ...
default {

}
}
}
}

The switch case works fine, but the HTTP::respond does not. I have tried hard coding the Location value and cookie value strings, but it makes no difference.