So, I'm running the "ultimate iRule debug" trying to figure out who is setting a cookie. It's a cookie that we think shouldn't be coming from the pool member. The reason we say that is when we test with a working connection (ie authenticated), that cookie never gets set. Specifically, in the debug, we don't see in in the "http_response" but see it in the "http_response_release":
My question is, why does the cookie show up only in the http_response_release? Wouldn't it show up in the http_response as well if it was being set by the pool member? To me it almost seems like the LTM is setting the cookie.
TS cookies come from ASM/AdvWAF. That uses the plugin architecture, which grabs responses early on the server side, bypasses much of the normal hud chain on the proxy path, and releases them late on the client side, which is why they are masked until HTTP_RESPONSE_RELEASE. Here are details on the ASM cookies: https://support.f5.com/csp/article/K54501322
TS cookies come from ASM/AdvWAF. That uses the plugin architecture, which grabs responses early on the server side, bypasses much of the normal hud chain on the proxy path, and releases them late on the client side, which is why they are masked until HTTP_RESPONSE_RELEASE. Here are details on the ASM cookies: https://support.f5.com/csp/article/K54501322
