For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

adam88_359238's avatar
adam88_359238
Icon for Altostratus rankAltostratus
Feb 11, 2019

iRule When HTTP Response Behavior

I'm trying to do a thing where if the F5 detects that the pool does not have active members, it will redirect the users to a specific URL but in addition it will also delete a session cookie. I lea...
application delivery
devops
http response
iRules
LTM
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Feb 11, 2019

The remove command will remove the cookie from the response, not ask the client to remove it from it’s cache...

To remove a cookie from client cache, you must set an expiration time before current time... the best practice is to set it to 1970! 

when HTTP_REQUEST {
  ...
  if { [active_members http_pool] = 0 } {
    HTTP::respond 302 noserver location "https://www.mywebsite.com" Set-Cookie "sessionID=path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT"
  }
}