Setting cookie levels

Here the article to setup secure and httponly flags for asm cookies: https://support.f5.com/kb/en-us/solutions/public/13000/700/sol13787.html?sr=55049482

To set the secure flag, you can use this code snippet :

when HTTP_RESPONSE {
    foreach mycookie [HTTP::cookie names] {
    HTTP::cookie secure $mycookie enable
   }
}

Hi,

In general, I prefer to have a VS layered VS architecture.

You apply the following irule to the Frontend VS :

when CLIENT_ACCEPTED {
    virtual virtual_server_name
}

Then, on the same irule, you can change the domain of desired cookies :

when HTTP_RESPONSE { 
    foreach mycookie [HTTP::cookie names] { 
            HTTP::cookie domain $mycookie ".testtest.com"
    } 
}

You may also need to restrict to certain cookies only :

when HTTP_RESPONSE { 
    foreach mycookie [HTTP::cookie names] {
        if { [class match $mycookie REWRITABLE_COOKIES] } {
            HTTP::cookie domain $mycookie ".testtest.com"
        }
    } 
}

Where REWRITABLE_COOKIES is a datagroup of type string.

Hi,

In general, I prefer to have a VS layered VS architecture.

You apply the following irule to the Frontend VS :

when CLIENT_ACCEPTED {
    virtual virtual_server_name
}

Then, on the same irule, you can change the domain of desired cookies :

when HTTP_RESPONSE { 
    foreach mycookie [HTTP::cookie names] { 
            HTTP::cookie domain $mycookie ".testtest.com"
    } 
}

You may also need to restrict to certain cookies only :

when HTTP_RESPONSE { 
    foreach mycookie [HTTP::cookie names] {
        if { [class match $mycookie REWRITABLE_COOKIES] } {
            HTTP::cookie domain $mycookie ".testtest.com"
        }
    } 
}

Where REWRITABLE_COOKIES is a datagroup of type string.