For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Inserting a http header on the response to the client

Problem this snippet solves:

Adding a HTTP Header "Feature-Policy: display-capture" on the response packet sent to the client.

How to use this snippet:

The output on the client will look like as below:

===============
> GET / HTTP/1.1
> Host: 10.1.1.102
> User-Agent: curl/7.65.0
> Accept: */*
>
* STATE: DO => DO_DONE handle 0x600097068; line 1756 (connection #0)
* STATE: DO_DONE => PERFORM handle 0x600097068; line 1877 (connection #0)
* Mark bundle as not supporting multiuse
* HTTP 1.1 or later with persistent connection
< HTTP/1.1 200 OK
< Date: Thu, 02 Jan 2020 15:15:55 GMT
< Last-Modified: Fri, 27 Jul 2018 15:07:51 GMT
< ETag: "10c-571fc79b4d021"
< Accept-Ranges: bytes
< Content-Length: 268
< Vary: Accept-Encoding
< Content-Type: text/html
< Set-Cookie: BIGipServerhttp-pool=201984684.20480.0000; path=/; Httponly
< Feature-Policy: display-capture
< Set-Cookie: TS01faa19b=018e1322efd69bb259413a08ccc68d05079fefc7fcda1a3267c67e05d29a2c7d73a0de0d75395ebafc3cabb388151c1f59bdfc25eb58e477c05e9e9d4e9bd2b6a7951920c2; Path=/
<
<!doctype html>
<html>
<head>
<meta charset="utf-8">
<title>Maintenance</title>
</head>

<body>
<hr width=500 color=red align=center size=10>
<h1 align="center">You Have Reached SOC Server server3.com</h1>
<hr width=500 color=red align=center size=10>
</body>
</html>
* STATE: PERFORM => DONE handle 0x600097068; line 2067 (connection #0)
* multi_done
* Connection #0 to host 10.1.1.102 left intact
* Expire cleared (transfer 0x600097068)

===============


Code :

when HTTP_RESPONSE {
HTTP::header insert Feature-Policy display-capture
}
#where I have just added the "display-capture as the directive"

Tested this on version:

11.6
Published Jan 14, 2020
Version 1.0
application delivery
iRules
LTM
No CommentsBe the first to comment