For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Stefan_Magnus_L's avatar
Stefan_Magnus_L
Icon for Nimbostratus rankNimbostratus
May 04, 2012

OneConnect, HTTP pipelining and security

We have a relatively large and secure web-site running behind bigip. Currently we don't have OneConnect enabled, but are considering it in order to make the system perform better.     It says i...
config
design
StephanManthey's avatar
StephanManthey
Icon for Nacreous rankNacreous
Sep 19, 2013

The RFC: 

   A client that supports persistent connections MAY "pipeline" its
   requests (i.e., send multiple requests without waiting for each
   response). A server MUST send its responses to those requests in the
   same order that the requests were received.

In case you apply OneConnect it would be required to avoid connection pooling for pipelined requests. Otherwise there would be no way to demultiplex the server replies as there is no concept of message identifier in the http protocol, afaik.