For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Lee_Sutcliffe's avatar
Lee_Sutcliffe
Icon for Nacreous rankNacreous
Jul 16, 2012

Session persistence - reading application set cookie

Hi,     We have out-sourced some developers who have written an application in their development load balanced environment however I do not think they use F5.       Now the application ...
config
design
nitass's avatar
nitass
Icon for Employee rankEmployee
Jul 18, 2012
set lbsicap [findstr [HTTP::uri] "AUTHTOKEN" 11 ";"]

if { $lbsicap != "" } {

persist uie $lbsicap

} this part is to find whether there is AUTHTOKEN in url. if so, do persist based on key which is retrieved from the url. 

[root@ve10:Active] config  b rule myrule list
rule myrule {
   when RULE_INIT {
   set uri "/something?AUTHTOKEN=1234567890;"
   log local0. "\$uri is $uri"
   log local0. "\[findstr $uri AUTHTOKEN 11 ;\] is [findstr $uri AUTHTOKEN 11 ;]"
}
}

[root@ve10:Active] config  tail /var/log/ltm
Jul 19 06:26:42 local/tmm info tmm[5111]: Rule myrule : $uri is /something?AUTHTOKEN=1234567890;
Jul 19 06:26:42 local/tmm info tmm[5111]: Rule myrule : [findstr /something?AUTHTOKEN=1234567890; AUTHTOKEN 11 ;] is 234567890;