Forum Discussion

Mike_Singer_599's avatar
Mike_Singer_599
Icon for Nimbostratus rankNimbostratus
Jan 11, 2012

Removing server header from http to https redirect

We have been asked to remove this by a client based on a pentest. I can find referernces to the noserver option in other posts but not the complete irule that incorrpates that w/ the redirected comma...
application delivery
dev
devops
iRules
nitass's avatar
nitass
Icon for Employee rankEmployee
Jan 11, 2012
can you try this? 

[root@ve1023:Active] config  b virtual bar list
virtual bar {
   destination 172.28.19.79:80
   ip protocol 6
   rules myrule
   profiles {
      http {}
      tcp {}
   }
}
[root@ve1023:Active] config  b rule myrule list
rule myrule {
   when HTTP_REQUEST {
        HTTP::respond 302 noserver Location "https://[HTTP::host][HTTP::uri]"
}
}

[root@ve1023:Active] config  curl -I http://172.28.19.79/test
HTTP/1.0 302 Found
Location: https://172.28.19.79/test
Connection: Keep-Alive
Content-Length: 0