Forum Discussion

Robert_47833's avatar
Robert_47833
Icon for Altostratus rankAltostratus
Mar 21, 2015

irule VS http profille

I have one interesting question which confuse me a lot today since I learn something new in BIGIP. My questions are: 1:If I removed one header in HTTP profile,but add same header back in irule,...
application delivery
devops
iRules
LTM
  • he_qiang_137361's avatar
    he_qiang_137361
    Mar 21, 2015

    I give it a test:

    root@(bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos) list ltm profile http customer_http 
ltm profile http customer_http {
    app-service none
    defaults-from http
    header-erase Headertest
    proxy-type reverse
}

root@(bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos) list ltm rule http_header_test 
ltm rule http_header_test {
    when HTTP_REQUEST {
        HTTP::header insert "Headertest" "123"
}

    }

    Then test with curl 10.1.1.73 -H "Headertest: 123", from the capture it shows http header Headertest still in the request.

StephanManthey's avatar
StephanManthey
Icon for MVP rankMVP
Mar 21, 2015

Hi Robbie,

 

I generally try to avoid conflicting configuration. Finally it´s a matter of precedence (as you already figured out) and may change with TMOS versions.

 

Please try to stick to iRules, http-class (or policy rules if you are on TMOS v11.4+) or modifications by profile.

 

Using iRules allow a very granular control, work conditionally and you can easily specify the context i.e. to erase a header for incoming requests (when HTTP_REQUEST) or server responses (when HTTP_RESPONSE).

 

Please try to avoid modifications to the default http-profile (may not be synced, may prevent sync, difficult to track).

 

Thanks, Stephan