# \#apache **URL:** https://community.f5.com/tag/apache/285.md [Latest](https://community.f5.com/latest.md) · [Categories](https://community.f5.com/categories.md) · [Tags](https://community.f5.com/tags.md) --- ## [BIG-IP methods to Fix the “421 Misdirected Request” Error](https://community.f5.com/t/big-ip-methods-to-fix-the-421-misdirected-request-error/76502)
**Author:** [@Pete\_A](https://community.f5.com/u/Pete_A)\ **Replies:** 3\ **Last updated:** [October 6, 2025, 8:25am UTC](https://community.f5.com/t/big-ip-methods-to-fix-the-421-misdirected-request-error/76502 "2025-10-06T08:25:02Z")
For those of us that are using the BIG-IP as a reverse proxy to front our internal websites to the world, the recent update to Apache has slapped a big “misdirected request” error across our shop windows. The fix is tha… --- ## [Apache origin and header conversion to iRules](https://community.f5.com/t/apache-origin-and-header-conversion-to-irules/70815)
**Author:** [@Patricio\_quirog](https://community.f5.com/u/Patricio_quirog)\ **Replies:** 2\ **Last updated:** [November 3, 2022, 1:08pm UTC](https://community.f5.com/t/apache-origin-and-header-conversion-to-irules/70815 "2022-11-03T13:08:47Z")
I need to take this an Irule f5 can you help me with this please \ Header edit Set-Cookie ^(.\*)$ $1;SameSite=None;Secure SetEnvIf Origin “^http(s)?://(.+\\.)?tgr\\.cl$” AccessControlAllowOrigin=$0 … --- ## [Apache Log4j2 (CVE-2021-44228) mitigation iApp](https://community.f5.com/t/apache-log4j2-cve-2021-44228-mitigation-iapp/67390)
**Author:** [@PeteWhite](https://community.f5.com/u/PeteWhite)\ **Replies:** 6\ **Last updated:** [December 21, 2021, 10:23am UTC](https://community.f5.com/t/apache-log4j2-cve-2021-44228-mitigation-iapp/67390 "2021-12-21T10:23:44Z")
Problem this snippet solves: There is a CVE released related to Apache log4j, which could be a vulnerability on a server located behind the BIG-IP. F5 SIRT have helpfully created an iRule to mitigate this vulnerability… --- ## [Need Help with Case Insensitive iRule for Apache Migration](https://community.f5.com/t/need-help-with-case-insensitive-irule-for-apache-migration/56308)
**Author:** [@jonathanw84](https://community.f5.com/u/jonathanw84)\ **Replies:** 1\ **Last updated:** [November 13, 2020, 1:21pm UTC](https://community.f5.com/t/need-help-with-case-insensitive-irule-for-apache-migration/56308 "2020-11-13T13:21:50Z")
Hi All, I have been helping on migrating our Apache environments into our F5 and everything has been working well, until we noticed that case insensitivity is not working. Here is the issue I am running into: If I … --- ## [Apache to F5 Configuration](https://community.f5.com/t/apache-to-f5-configuration/54197)
**Author:** [@F5\_Jeff](https://community.f5.com/u/F5_Jeff)\ **Replies:** 1\ **Last updated:** [June 13, 2018, 11:42pm UTC](https://community.f5.com/t/apache-to-f5-configuration/54197 "2018-06-13T23:42:49Z")
Hi everyone, We are having trouble with our F5 Configuration.Here is the scenario: We are using Mobile application (from playstore) to access the server. It uses standard VS with port 443 and performing SSL offload… --- ## [health monitor IIS](https://community.f5.com/t/health-monitor-iis/15476)
**Author:** [@bigipjr28\_13978](https://community.f5.com/u/bigipjr28_13978)\ **Replies:** 4\ **Last updated:** [October 6, 2017, 4:08pm UTC](https://community.f5.com/t/health-monitor-iis/15476 "2017-10-06T16:08:07Z")
Hello, I was wondering if someone can shed some light on a health monitor I am trying to setup. Ill give a brief overview of the setup. We have an application that gets proxied via apache ( apache are the nodes in … --- ## [Uploading Apache certificate chain](https://community.f5.com/t/uploading-apache-certificate-chain/37930)
**Author:** [@JBlogs\_314812](https://community.f5.com/u/JBlogs_314812)\ **Replies:** 0\ **Last updated:** [September 21, 2017, 12:44pm UTC](https://community.f5.com/t/uploading-apache-certificate-chain/37930 "2017-09-21T12:44:10Z")
Trying to implement smart card auth for the big-ip configuration utility, but unable to upload the cert chain via the ui or cli. Receive the following error: Values (/parition/name) specified for Certificate Bundle En… --- ## [Migrate IIS ASM policy to Apache](https://community.f5.com/t/migrate-iis-asm-policy-to-apache/44545)
**Author:** [@TJ\_Vreugdenhil\_1](https://community.f5.com/u/TJ_Vreugdenhil_1)\ **Replies:** 1\ **Last updated:** [June 24, 2017, 5:38pm UTC](https://community.f5.com/t/migrate-iis-asm-policy-to-apache/44545 "2017-06-24T17:38:03Z")
Hello! If a you have a established IIS ASM policy, but your company moves to Apache Servers. At a high level, does anyone have any tips for merging the two policies. I have read this entire article here; Maintainin… --- ## [APM :: Portal Access Lists :: SNI & HTTP](https://community.f5.com/t/apm-portal-access-lists-sni-http/38103)
**Author:** [@Ryan\_34424](https://community.f5.com/u/Ryan_34424)\ **Replies:** 1\ **Last updated:** [June 5, 2017, 5:10pm UTC](https://community.f5.com/t/apm-portal-access-lists-sni-http/38103 "2017-06-05T17:10:55Z")
I’m trying to create a Portal Access List with a few web resources, and one of the links does not work because it is an Apache server that is validating that the SNI and HTTP hostname match. The problem is, that when the… --- ## [Apache Style Logging with HSL](https://community.f5.com/t/apache-style-logging-with-hsl/63782)
**Author:** [@Matt\_Hyclak\_376](https://community.f5.com/u/Matt_Hyclak_376)\ **Replies:** 6\ **Last updated:** [September 1, 2015, 2:50pm UTC](https://community.f5.com/t/apache-style-logging-with-hsl/63782 "2015-09-01T14:50:17Z")
Problem this snippet solves: When SNATing to servers, the client IP is lost. This was information our security group and developers wanted to have available, so I created an iRule to use the HSL functionality in BigIP 1… --- ## [US FEDERAL: Enabling Kerberos for Smartcard Authentication to Apache.](https://community.f5.com/t/us-federal-enabling-kerberos-for-smartcard-authentication-to-apache/68662)
**Author:** [@MichaelatF5](https://community.f5.com/u/MichaelatF5)\ **Replies:** 0\ **Last updated:** [March 3, 2015, 8:32pm UTC](https://community.f5.com/t/us-federal-enabling-kerberos-for-smartcard-authentication-to-apache/68662 "2015-03-03T20:32:00Z")
The following provides guidance on the configuration of BIG-IP Local Traffic Manager and Access Policy Manager in support of Apache Web Server Smartcard / Kerberos access using Active Directory as the Key Distribution Ce… --- ## [Apache mod\_auth\_tkt Single Sign On](https://community.f5.com/t/apache-mod-auth-tkt-single-sign-on/64606)
**Author:** [@CodeCentral\_194](https://community.f5.com/u/CodeCentral_194)\ **Replies:** 1\ **Last updated:** [January 30, 2015, 3:21pm UTC](https://community.f5.com/t/apache-mod-auth-tkt-single-sign-on/64606 "2015-01-30T15:21:55Z")
Problem this snippet solves: This iRule is designed to parse and verify the digest from a auth\_tkt cookie. This is a proof-of-concept that can be leveraged to offload authentication and/or verification from the apache s… --- ## [Optimal timeout and interval settings for Apache health monitor](https://community.f5.com/t/optimal-timeout-and-interval-settings-for-apache-health-monitor/19664)
**Author:** [@auyantepui\_1695](https://community.f5.com/u/auyantepui_1695)\ **Replies:** 5\ **Last updated:** [September 11, 2014, 6:25pm UTC](https://community.f5.com/t/optimal-timeout-and-interval-settings-for-apache-health-monitor/19664 "2014-09-11T18:25:17Z")
We have a farm of Apache 2.2 webservers being load balanced by a F5. Currently timeout is set to 30 seconds -believe it’s the default value-. Based on this configuration; if a specific webserver has an outage it could… --- ## [speedy profile ltm 11.4.1](https://community.f5.com/t/speedy-profile-ltm-11-4-1/15377)
**Author:** [@bigipjr28\_13978](https://community.f5.com/u/bigipjr28_13978)\ **Replies:** 1\ **Last updated:** [August 20, 2014, 4:42pm UTC](https://community.f5.com/t/speedy-profile-ltm-11-4-1/15377 "2014-08-20T16:42:03Z")
hey guys, I was wondering if the speedy profile would need the apache module associated with it on the backend configured in order to work ? the backend webservers run apache 2.2.24 also Thanks --- ## [OpenSSL vulnerability and Apache Commons FileUpload vulnerability CVE-2014-0050](https://community.f5.com/t/openssl-vulnerability-and-apache-commons-fileupload-vulnerability-cve-2014-0050/14348)
**Author:** [@Rodrigo\_N\_Soare](https://community.f5.com/u/Rodrigo_N_Soare)\ **Replies:** 3\ **Last updated:** [May 23, 2014, 4:48pm UTC](https://community.f5.com/t/openssl-vulnerability-and-apache-commons-fileupload-vulnerability-cve-2014-0050/14348 "2014-05-23T16:48:53Z")
Hi, I’m big-ip version 11.5.1 HF2 and my BIG-IP iHealth station featuring some vulnerabilities and am not getting correct. 1 - Configuration utility / Apache Commons FileUpload vulnerability CVE-2014-0050 how to ma… --- ## [Mitigating The Apache Struts ClassLoader Manipulation Vulnerabilities Using ASM](https://community.f5.com/t/mitigating-the-apache-struts-classloader-manipulation-vulnerabilities-using-asm/64911)
**Author:** [@Nir\_Zigler\_7297](https://community.f5.com/u/Nir_Zigler_7297)\ **Replies:** 0\ **Last updated:** [May 1, 2014, 8:46am UTC](https://community.f5.com/t/mitigating-the-apache-struts-classloader-manipulation-vulnerabilities-using-asm/64911 "2014-05-01T08:46:00Z")
Background Recently the F5 security research team has witnessed a series of CVE’s created for the popular Apache Struts platform. From Wikipedia: Apache Struts was an open-source web application framework for developin… --- ## [4 reasons not to use mod-security](https://community.f5.com/t/4-reasons-not-to-use-mod-security/67342)
**Author:** [@Lori\_MacVittie](https://community.f5.com/u/Lori_MacVittie)\ **Replies:** 7\ **Last updated:** [August 2, 2013, 9:20am UTC](https://community.f5.com/t/4-reasons-not-to-use-mod-security/67342 "2013-08-02T09:20:52Z")
Apache is a great web server if for no other reason than it offers more flexibility through modules than just about any other web server. You can plug-in all sorts of modules to enhance the functionality of Apache. But … --- ## [I am wondering why not all websites enabling this great feature GZIP?](https://community.f5.com/t/i-am-wondering-why-not-all-websites-enabling-this-great-feature-gzip/67861)
**Author:** [@Lori\_MacVittie](https://community.f5.com/u/Lori_MacVittie)\ **Replies:** 2\ **Last updated:** [June 9, 2013, 10:46am UTC](https://community.f5.com/t/i-am-wondering-why-not-all-websites-enabling-this-great-feature-gzip/67861 "2013-06-09T10:46:21Z")
Understanding the impact of compression on server resources and application performance While doing some research on a related topic, I ran across this question and thought “that deserves an answer” because it certain… --- ## [Using "X-Forwarded-For" in Apache or PHP](https://community.f5.com/t/using-x-forwarded-for-in-apache-or-php/67146)
**Author:** [@Lori\_MacVittie](https://community.f5.com/u/Lori_MacVittie)\ **Replies:** 8\ **Last updated:** [June 25, 2012, 10:51am UTC](https://community.f5.com/t/using-x-forwarded-for-in-apache-or-php/67146 "2012-06-25T10:51:10Z")
An issue that often comes up for users of any full proxy-based product is that the original client IP address is often lost to the application or web server. This is because in a full proxy system there are two connectio… --- ## [F5 Friday: Zero-Day Apache Exploit? Zero-Problem](https://community.f5.com/t/f5-friday-zero-day-apache-exploit-zero-problem/65265)
**Author:** [@Lori\_MacVittie](https://community.f5.com/u/Lori_MacVittie)\ **Replies:** 1\ **Last updated:** [August 29, 2011, 3:30pm UTC](https://community.f5.com/t/f5-friday-zero-day-apache-exploit-zero-problem/65265 "2011-08-29T15:30:18Z")
infosec A recently discovered 0-day Apache exploit is no problem for BIG-IP. Here’s a couple of different options using F5 solutions to secure your site against it. It’s called “Apache Killer” and it’s yet another exa… --- ## [How To Limit URI Length Without Recompiling Apache](https://community.f5.com/t/how-to-limit-uri-length-without-recompiling-apache/66590)
**Author:** [@Lori\_MacVittie](https://community.f5.com/u/Lori_MacVittie)\ **Replies:** 0\ **Last updated:** [December 27, 2010, 1:17pm UTC](https://community.f5.com/t/how-to-limit-uri-length-without-recompiling-apache/66590 "2010-12-27T13:17:00Z")
Use network-side scripting, of course! While just about every developer and information security professional knows that a buffer-overflow exploit can result in the execution of malicious code not many truly grok the “w… --- ## [I Can Has UR .htaccess File](https://community.f5.com/t/i-can-has-ur-htaccess-file/68164)
**Author:** [@Lori\_MacVittie](https://community.f5.com/u/Lori_MacVittie)\ **Replies:** 4\ **Last updated:** [June 9, 2010, 9:58am UTC](https://community.f5.com/t/i-can-has-ur-htaccess-file/68164 "2010-06-09T09:58:26Z")
Notice that isn’t a question, it’s a statement of fact Twitter is having a bad month. After it was blamed, albeit incorrectly, for a breach leading to the disclosure of both personal and corporate information via Goog… --- ## [Using Resource Obfuscation to Reduce Risk of Mass SQL Injection](https://community.f5.com/t/using-resource-obfuscation-to-reduce-risk-of-mass-sql-injection/67981)
**Author:** [@Lori\_MacVittie](https://community.f5.com/u/Lori_MacVittie)\ **Replies:** 1\ **Last updated:** [March 5, 2009, 3:18pm UTC](https://community.f5.com/t/using-resource-obfuscation-to-reduce-risk-of-mass-sql-injection/67981 "2009-03-05T15:18:02Z")
One of the ways miscreants locate targets for mass SQL injection attacks that can leave your applications and data tainted with malware and malicious scripts is to simply seek out sites based on file extensions. Attacker… --- ## [2.5 bad ways to implement a server load balancing architecture](https://community.f5.com/t/2-5-bad-ways-to-implement-a-server-load-balancing-architecture/67450)
**Author:** [@Lori\_MacVittie](https://community.f5.com/u/Lori_MacVittie)\ **Replies:** 1\ **Last updated:** [February 17, 2009, 10:41am UTC](https://community.f5.com/t/2-5-bad-ways-to-implement-a-server-load-balancing-architecture/67450 "2009-02-17T10:41:32Z")
I’m in a bit of mood after reading a Javaworld article on server load balancing that presents some fairly poor ideas on architectural implementations. It’s not the concepts that are necessarily wrong; they will work. It’… --- ## [3 Reasons not to use Apache mod rewrite](https://community.f5.com/t/3-reasons-not-to-use-apache-mod-rewrite/67377)
**Author:** [@Lori\_MacVittie](https://community.f5.com/u/Lori_MacVittie)\ **Replies:** 5\ **Last updated:** [July 7, 2008, 10:21pm UTC](https://community.f5.com/t/3-reasons-not-to-use-apache-mod-rewrite/67377 "2008-07-07T22:21:00Z")
After reading this discussion on Slashdot regarding an anti-virus agent pretending to be Internet Explorer and flooding sites with requests I waited to see a response come from an Apache fan on using mod\_rewrite to detec…