Set the SameSite Attribute for LTM Persistence Cookies

Problem this snippet solves: Chrome (and likely other browsers to follow) will enforce the SameSite attribute on HTTP cookies to Lax beginning soon (initial limited rollout week of Feb 17th, 2020) w...
Published Feb 06, 2020
Version 1.0
application delivery
csrf
iRules
samesite
security
Hoolio's avatar
Hoolio
Ret. Employee
Feb 26, 2020

Hi Orlando,

 

There is a link in this article to a v11 compatible version on github:

 

https://github.com/f5devcentral/irules-toolbox/blob/master/security/http/cookies/samesite-attributes-pre-v12.tcl

 

The latter iRule will work for v11, but uses more CPU cycles because we don't have the HTTP::cookie attribute sub-command until v12.0. If at all possible, I'd suggest upgrading your v11.5 BIG-IPs to a supported software version. v11.5 has reached End of Software Development in 2019 and therefore doesn't get security fixes. End of Technical Support for v11.5 is coming in April:

 

K5903: BIG-IP software support policy

https://support.f5.com/csp/article/K5903

 

Aaron