Question
- Can Silverline insert HSTS header to the HTTP response traffic?
Environment
- Silverline WAF
- HSTS - HTTP Strict Transport Security
- iRule
Answer
- Yes, Silverline can insert HSTS header via an iRule
-
when HTTP_RESPONSE_RELEASE priority 350 {
if {![HTTP::header exists "Strict-Transport-Security"]} {
HTTP::header insert "Strict-Transport-Security" "max-age=16070400; includeSubdomains"
}
}
In order to implement this iRule, create a ticket with SOC and provide desired name for your iRule.