For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Anthony_Epron's avatar
Anthony_Epron
Icon for Nimbostratus rankNimbostratus
Jun 16, 2020

Irule to make HTTP request size compliant with header

Hello,   I need to implement in F5 is a possibility to reject an HTTP request in case the size of the request is not corresponding to the Content-Length of the header.   I cannot use ASM for ...
iRules
LTM
security
PeteWhite's avatar
PeteWhite
Icon for Employee rankEmployee
Jun 21, 2020

what you are trying to do will work with GET but you may wish to consider POST, where you will have to use HTTP::collect and use HTTP::payload length.

For use with GET, you can simply use string length:

when HTTP_REQUEST {
  if { [expr {  [string length [HTTP::request]] eq ne expr [HTTP::header "Content-Length"]} {
    reject
  }
 }