For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Emad's avatar
Emad
Icon for Cirrostratus rankCirrostratus
May 14, 2015

Why Irules add Server Header in HTTP::respond and HTTP::redirect

As observed when ever I use HTTP::respond or HTTP::redirect for 302, LTM add server header in response i.e Server: BigIP. Is this a standard behavior and could this be changed. For Example Irule is....
application delivery
devops
iRules
Patrik_Jonsson's avatar
Patrik_Jonsson
Icon for MVP rankMVP
May 14, 2015

I believe it's there to make the troubleshooting easier and it might even be a standard since other web servers does this as well (IIS, Apache, Tomcat etc) You can probably remove it in the HTTP_RESPONSE event.

Untested iRule: 

when HTTP_REQUEST {
    HTTP::redirect https://[getfield [HTTP::host] ":" 1][HTTP::uri]
}


when HTTP_RESPONSE {

    if { [HTTP::is_redirect] && [HTTP::header value "Server"] == "BigIP" } {
        HTTP::header remove Server
    }

}

/Patrik