For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jean_Mamène's avatar
Jean_Mamène
Icon for Cirrus rankCirrus
Jun 13, 2019

Irule header APM

Hello,   The fact that the EXAMPLE * header are eliminated by the F5 blocks any possibility of traceability of our messages within our information system for some VHOST. I already set up irule...
iRules
security
Nicolas_Destor's avatar
Nicolas_Destor
Icon for Cirrostratus rankCirrostratus
Jun 19, 2019

Hi Jean,

My apologize for this late answer. Do you have an ASM profile attached to your vHost/VS? Because the default behavior of HTTP profile in LTM is to preserve client headers normally, your issue should not happen.

You can try this iRule otherwise (not tested):

when HTTP_REQUEST {
    set HEADER1 [HTTP::header "EXAMPLE_TX_ID"]
    set HEADER2 [HTTP::header "EXAMPLE_SPAN_ID"]
}
 
when HTTP_REQUEST_SEND {
    if [string length $HEADER1] {
         HTTP::header replace "EXAMPLE_TX_ID" $HEADER1
        }
    if [string length $HEADER2] {
            HTTP::header replace "EXAMPLE_SPAN_ID" $HEADER2
        }
}