For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

zafer's avatar
zafer
Icon for Nimbostratus rankNimbostratus
Apr 26, 2008

uie persistence

Hello

 

 

if the client has cookie and if client changes dynamicly ip address, i want persist this client

 

and if the client does not accept persistence or does not have cookie i want persist some parameter in uri

 

 

i try this solution but it didnt work

 

http://devcentral.f5.com/wiki/default.aspx/iRules/Weblogic_JSessionID_Persistence.html

 

 

 

what will be logic flow

 

 

if the client has cookie and if he changes ip address persist it

 

else

 

if the client does not have cookie or does not accept cookie, persist it' sessionid

 

 

http://somedomain.com/some/path?jsessionid=MYSESSIONID&someotherparam=FOOBAR

 

 

 

Could you please help me anybody

 

 

regards

 

 

zafer
application delivery
dev
devops
iRules

12 Replies

Show More
  • zafer's avatar
    zafer
    Icon for Nimbostratus rankNimbostratus
    May 15, 2008
    Aaron,

     

    i want check jsession id value in uri and referer jessionid value; if they arent same i want block it

     

     

    what do i need change in this code

     

     

    regards

     

     

    zafer
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    May 15, 2008
    You can parse the jsessionid from a header using HTTP::header value Referer. You'd want to parse the jsession id using 'jsess [findstr [HTTP::header value Referer] "jsessionid" 11 ";"]'. You could then compare that with the value of the jessionid cookie 'HTTP::cookie value jsessionid'. If it doesn't match, you could send a redirect, drop the request or take some other action.

     

     

    Aaron