WhiteBoard Wednesday: HTTP Strict Transport Security

In this edition of Whiteboard Wednesday, we discuss the topic of HTTP Strict Transport Security (HSTS).  This interconnected world is quickly moving toward encrypting everything, and it's nice to know some of the capabilities that are available today.  This video highlights what HSTS is, how it can be used, and how you can implement it using the BIG-IP.  Enjoy!

 

 

 

Related Resources:

Implementing HSTS using iRules

Implementing HSTS in LineRate

Update - Implementing HSTS in Policy:

ltm policy hsts_handling {
    controls { forwarding }
    requires { http tcp }
    rules {
        hsts_header_insert {
            actions {
                0 {
                    http-header
                    response
                    insert
                    name Strict-Transport-Security
                    value "max-age=31536000; includeSubDomains; preload"
                }
            }
            ordinal 2
        }
        nonssl_redirect {
            actions {
                0 {
                    http-reply
                    redirect
                    location https://[HTTP::host][HTTP::uri]
                }
            }
            conditions {
                0 {
                    tcp
                    port
                    values { 80 }
                }
            }
            ordinal 1
        }
    }
    strategy first-match
}