For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Chris_Schaerli_'s avatar
Chris_Schaerli_
Icon for Nimbostratus rankNimbostratus
Jun 18, 2007

Tracking session in soap header?

I have been going though the board looking for something to help me with a session persistence issue. I have some transactions I need to set persistence on and I can’t use source IP or cookie. The o...
application delivery
dev
devops
iRules
Chris_Schaerli_'s avatar
Chris_Schaerli_
Icon for Nimbostratus rankNimbostratus
Jun 20, 2007
Initially I thought the soap header was generated on the client side.

 

What is happening is the client generates an authentication attempt. The reply from the server contains the soap header value I want to set persistence on. The client then passes a data request with the same soap header.

 

The bigip is not sending that request back to the same node it authenticated to so the server that gets the request sees it as an unauthenticated request.