Set the SameSite Attribute for LTM Persistence Cookies

Problem this snippet solves: Chrome (and likely other browsers to follow) will enforce the SameSite attribute on HTTP cookies to Lax beginning soon (initial limited rollout week of Feb 17th, 2020) w...
Published Feb 06, 2020
Version 1.0
application delivery
csrf
iRules
samesite
security
Hoolio's avatar
Hoolio
Ret. Employee
Feb 11, 2020

This more current iRule handles setting SameSite on LTM persistence cookies and includes special handling for user-agents that don't support SameSite=None on cookies:

 

https://devcentral.f5.com/s/articles/iRule-to-set-SameSite-for-compatible-clients-and-remove-it-for-incompatible-clients-LTM-ASM-APM