Forum Discussion
Albert__Tase_70
Nimbostratus
Nimbostratususing an Irule to strip off the cookie info for sceurity reasons
is there a way using an Irule to use cookie insert but not to include the pool name and ip address of the server ? i know the f5 uses this info for its way of doing the persistance. I have bene lookin...
You can specify an alternate persistence cookie name in the persistence profile, but you can't just remove the hash of the serverIP and port from the persistence cookie since that's what LTM uses to find the correct server.
You can definitely encrypt the cookie value on the way out, though, and decrypt it on the way in.
Here's a good start on that option. I think you'd just need to replace the cookie name with your persistence cookie name: Click here
(http://devcentral.f5.com/wiki/default.aspx/iRules/EncryptingCookie.html)
HTH
/deb
