For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Chris_Bartnick_'s avatar
Chris_Bartnick_
Icon for Nimbostratus rankNimbostratus
Apr 21, 2009

Irule for blocking http smuggling

Hello,   Would anyone have an Irule config or template that can block "HTTP request smuggling" or HRS...or possibly forward me if the direction to create one for an ltm running 9x code?   ...
application delivery
dev
devops
iRules
CharlesCS's avatar
CharlesCS
Icon for Cirrus rankCirrus
Apr 23, 2009
Is this approach valid for versions prior to 9.4.0? The HTTP_header page in the wiki implies that multiple instances of a named header only get counted more than once in 9.4.0 and above.