For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Michael_Jenkins's avatar
Michael_Jenkins
Icon for Cirrostratus rankCirrostratus
Apr 09, 2014

What is the TCP connection lifetime?

I've just come across the REWRITE::disable command and had a use for it with some of our stuff, and as I looked at the documentation page (here), I noticed that it says that the REWRITE will be disabled throughout the lifetime of the TCP connection.

 

I'm not all that familiar with this, so I was wondering if anyone could help explain to me the TCP lifecyle (e.g. if it's similar to an HTTP request lifecycle or not), and whether if I disable this for a particular page, it will cause issues with any other pages that I'd like to continue rewriting.

 

Any thoughts/help would be greatly appreciated. Thanks, Michael

 

application delivery
BIG-IP Access Policy Manager (APM)
devops
iRules
security

1 Reply

  • IheartF5_45022's avatar
    IheartF5_45022
    Icon for Nacreous rankNacreous
    Apr 10, 2014

    I'm not going into a full description, but a TCP connection may contain multiple HTTP request/responses, so if you are worried about turning it off for one request might affect others, you should be. The following code would help;-

     

    when HTTP_RESPONSE {
  if {[HTTP::path] eq "/jangins} {
    REWRITE::disable
  } else {
    REWRITE::enable
  }
}