Modifying Request Content Without Client Sending All Content

Does the client always set the content-length header in the request when doing an HTTP upload? If so, you could use something like this:

 

 

when HTTP_REQUEST {
   if {[HTTP::method]=="POST" and [HTTP::header exists "Content-Length"] and [HTTP::header value Content-Length] > 30000000}{
      HTTP::respond 413 content "request size too large"
   }
}

 

 

This rule will trigger when BIG-IP parses the HTTP request headers, but before any data is sent by the client. The rule will look for POST requests with a Content-Length header whose value is set to greater than 30M bytes and respond with an HTTP 413 code and content of "request size too large". No request will be sent to the web server in the pool for such requests.

 

 

Aaron