For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

SteveEason's avatar
SteveEason
Icon for Cirrus rankCirrus
May 26, 2020
Solved

Using Policies to insert Cache-Control Headers

We've implemented several rules into a policy which we are applying to our sites to do several functions, like inserting cache-control, pragma and removing X-powered-by, etc. We have a developer who...
devops
iRules
LTM
  • Ivan_Chernenkii's avatar
    Ivan_Chernenkii
    May 26, 2020

    Hello Steve,

     

    As I understand, you need to use a little bit different rules:

    1. If no "Cache-Control" header, then insert it in response with appropriate values
    2. If "Cache-Control" header exists, then replace its values with your values.

    Thanks, Ivan

SteveEason's avatar
SteveEason
Icon for Cirrus rankCirrus
May 27, 2020

Thank you. I've adjusted our policies based on your information and it appears to have fixed the issues. The policy now has 2 rules, that look like the following.

 

Rule 1:

Conditions:

HTTP Header full string named 'Cache-Control' does not exist at response time.

Actions:

Insert HTTP Header named 'Cache-Control' with value 'no-cache, no-store, must-revalidate' at response time.

 

Rule 2:

Conditions:

HTTP Header full string named 'Cache-Control' exists at response time.

Actions:

Replace HTTP Header named 'Cache-Control' with value 'no-cache, no-store, must-revalidate' at response time