For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mark_Cloutier's avatar
Mark_Cloutier
Icon for Nimbostratus rankNimbostratus
Feb 21, 2017

Trying to set a relative (5 day) expiring cookie with HTTP:RESPOND

Is it possible to use the HTTP:cookie expires relative syntax in an HTTP Respond irule? I am currently using the following with Max-age to set a 5 day cookie. Of course IE choose to ignore this and...
application delivery
LTM
Leonardo_Souza's avatar
Leonardo_Souza
Icon for Cirrocumulus rankCirrocumulus
Feb 21, 2017

The cookie options are no dictated by F5, is up to the standard and the browsers that apply the rules or not.

 

Wikipedia says: "As of 2016 Internet Explorer did not support Max-Age."

 

Check the cookie explanation in wikipedia:

 

https://en.wikipedia.org/wiki/HTTP_cookieExpires_and_Max-Age

 

If you want to go deeper, there a whole RFC just for that:

 

https://tools.ietf.org/html/rfc6265

 

About the HTTP response event, yes you can set the cookie there. You can see examples here, using both http request and response.

 

https://devcentral.f5.com/wiki/irules.http__respond.ashx