encrypted cookie generation and decryption
Problem this snippet solves: AES::key command in RULE_INIT event doesn't have compatibility with CMP generate dynamic cooke to provide http client and encrypted the cookie before providing to clie...
Updated Jun 06, 2023
Version 2.0wonsoo_41223
Historic F5 Account
Joined January 04, 2011
Daniel_Varela
Apr 07, 2016Employee
Hi Wonsoo, very nice and neat irule.
I have a question, HTTP profiles already allow us to encrypt cookies, we just need to specify the cookie name and passphrase. I am not sure which encryption method is used but probably is enough for the majority of the cases and more efficient. AES command is quite resource demanding for the nature of the operation. Am I missing something?
Thanks!