Validate Application Requests

Hi Marcel,

The BigIP doesn't necessarily validate HTTP requests. We do validate that the request is compliant with RFC2616. Ie, the first line of a request has three fields, the method, a uri, and a version. We do not validate what the methods are or what the version is.

If you would like to do that kind of thing, then the following rule example should help:

    
 class valid_methods { 
    "GET" 
    "POST" 
    "HEAD" 
 } 
 rule validate_http { 
    when HTTP_REQUEST { 
       if { [HTTP::version] eq "Unknown" } { 
          log "Invalid HTTP version - connection from: [IP::remote_addr]:[TCP::remote_port] rejected" 
          reject 
       } elseif { not [matchclass [HTTP::method] equals $::valid_methods] } { 
          log "Invalid HTTP method [HTTP::method] - connection from: [IP::remote_addr]:[TCP::remote_port] rejected" 
          reject 
       } 
    } 
 } 
 

You can update the valid_methods class to include any methods your site might need.