Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Re: how to display maintenance banner via LTM policy

Hi ,

I found the issue. There are two irule applied on VIP. First irule mainentance page  and second irule to set same site cookie as none .

In Packet capture i saw irule exceution error. First irule for mainentance page when http request is matching and it is responding to 200 with maintenece page.

when second irule is exceuting, it is the http response release  to set  same site cookie as none as  first irule is already executed with response. It is failing.

For testing i have removed second irule(same site cookie), it is working.

Just want to know if  below same site irule is feasible via LTM policy or other solution.

same site irule-

when HTTP_RESPONSE_RELEASE {
set cookie_names [HTTP::cookie names]
foreach a_cookie $cookie_names
{
if {not [HTTP::cookie attribute $a_cookie exists {SameSite}] }
{HTTP::cookie attribute $a_cookie insert "SameSite" "None"}
}
}

 

 

1 Reply

  • M_Saeed's avatar
    M_Saeed
    Icon for Cirrus rankCirrus

    Regarding LTM policies, They may not have the same level of granularity in event triggers as iRules, which can be triggered at various stages of traffic processing. You may need to stick with iRule in your case.