Dell 3-DNS Especificaciones descargar pdf (Pagina 176)

Chapter 4: Configuring the High-Level Network

4-96

• Client certificate fields

• Client session IDs

An example of when you might want to insert a header into an HTTP

request is when the proxy is configured to request, rather than require, a

certificate during client authentication. Because client authentication always

succeeds in this case, despite status of the certificate, you might want the

proxy to insert information into the HTTP request about the client certificate

and the results of the verification attempt. Based on this information, the

BIG-IP or a server could then perform actions such as redirecting the

request to another server, or sending different content back to the client.

If any of these header types is inserted into a valid HTTP request, the SSL

proxy places the header so that it immediately follows the first line of the

request. If more than one header is inserted, the headers are inserted in the

order listed above.

The following sections describe these header types.

Sometimes, the SSL proxy might not be able to insert a specified header,

such as when a client request uses an non-standard HTTP method, or the

request is pipelined. If you are making security decisions based on the value

of these headers, you should exercise caution. Also, using the HTTP header

insertion feature is not recommended when the SSL proxy targets a virtual

server directly accessible to client connections. This is because it is not

known whether the connection has come through the SSL proxy or directly

from the client.

A custom HTTP header

When adding an SSL proxy, you can configure the proxy to insert a string of

your choice into an HTTP request. This feature is useful for custom

applications, as well as for securing content. For example, when the Outlook

Web Access application detects the presence of a particular custom HTTP

header, the application generates embedded URLs using the protocol

HTTPS instead of HTTP.

A properly-formatted custom HTTP header is in the form of Field: Value.

Note that an improperly-formatted custom HTTP header could cause the

content server to fail in its handling of proxied requests.

To insert a custom header using the Configuration utility

1. In the navigation pane, click Proxies.

2. Click the Add button.

3. In the Insert HTTP Header String box, type a custom HTTP

header in the form of Field: Value.

4. Click Done.

1 2 ... 171 172 173 174 175 176 177 178 179 180 181 ... 425 426

Sin comentarios

Dell 3-DNS Especificaciones Pagina 176