Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Alex_Pozzan_325's avatar
Alex_Pozzan_325
Icon for Nimbostratus rankNimbostratus
Dec 04, 2008

iRule for AJP

Is there a way to write an iRule to recognize jsessionid inside a tcp packet?

2 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Hi Alex,

     

     

    If you add an HTTP profile to the virtual server you can parse the HTTP headers and data using HTTP:: commands. If the jsessiondid is in the HTTP URI, you can use HTTP::uri to get to it. If it's in a cookie, you can use HTTP::cookie. If it's in the payload, you'd need to buffer the payload using HTTP::collect.

     

     

    You can get more info on the various command in the iRule wiki (Click here). There are also some Codeshare rules which use the jsessionid (Click here).

     

     

    If you have more specific questions, let us know.

     

     

    Aaron
  • VINCENT_LAVERGN's avatar
    VINCENT_LAVERGN
    Historic F5 Account
    Hi,

     

     

    Here is an example where I did actually persist on the SessionID contained in the AJP

     

     

    http://devcentral.f5.com/Default.aspx?tabid=53&forumid=5&postid=33541&view=topic

     

     

    Vincent