For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

southern_shred1's avatar
southern_shred1
Icon for Nimbostratus rankNimbostratus
Nov 10, 2017

iRules HTTP::header insert

Hi   I am new to irules and applied the following simple iRule to a test VIP.   As you can see its supposed to inject the protocol and cipher version details to the http header. We can see the...
application delivery
BIG-IP
iRules
Andy_McGrath's avatar
Andy_McGrath
Icon for Cumulonimbus rankCumulonimbus
Nov 10, 2017

You need the web server to get those headers in the HTTP Request so your original iRule would do that. If you need your web server to add them to the HTTP Response then you will need to look at your web servers' configuration and/or code.

 

If you don't want your web server to add the headers you could just have both iRule event run on the F5 so it inserts the Headers in the Request and Response

 

e.g.

 

when HTTP_REQUEST {
    HTTP::header insert X-SSL-Protocol [SSL::cipher version]
    HTTP::header insert X-SSL-Cipher [SSL::cipher name]
    log local0. "REQUEST, Version: [SSL::cipher version], Name: [SSL::cipher name]"
}
when HTTP_RESPONSE {
    HTTP::header insert X-SSL-Protocol [SSL::cipher version]
    HTTP::header insert X-SSL-Cipher [SSL::cipher name]
    log local0. "RESPONSE, Version: [SSL::cipher version], Name: [SSL::cipher name]"
}