For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Joel_Newton's avatar
Joel_Newton
Icon for Cirrus rankCirrus
Oct 19, 2016

iRule gets cached and executes when it shouldn't

I have a maintenance iRule I apply to certain virtual servers during downtime operations. It uses the 'when HTTP_REQUEST' event and writes out the HTML for the page being displayed to the end user. ...
application delivery
iRules
LTM
Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
Oct 19, 2016

Hello Joel,

Can you share one line from your iRule, the HTTP::respond function which responds with HTML content? You may replace the HTML code with a placeholder but I'd like to see if you include any headers.

Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
Oct 19, 2016

Thanks for the reference. I've provided an example of my own. Such use of headers should address your problem regardless of circumstances. Some headers from your current solution are too bulky and provide no added value, but I think the real problem is the absence of Connection Close header. You want to add this to any HTTP response functions in your maintenance iRule.

 

HTTP::respond 200 content "html..." Cache-Control no-cache Pragma no-cache Connection Close

 

If after this update the issue prevails, you must do a one-time clean up of all active connections on that VS.

tmsh delete sys conn cs-server-addr YourVS-IP cs-server-port YourVS-port

 

Regards,