Dell 3-DNS Especificaciones descargar pdf (Pagina 177)

Proxies

BIG-IP® Reference Guide 4-97

To insert a custom header from the command line

To insert a custom header into an HTTP request using the command line,

specify the header insert argument with the bigpipe proxy command, as

follows:

b proxy <ip>:<service> header insert \"quoted string\"

A cipher specification

When adding an SSL proxy, you can configure the proxy to insert

information about the negotiated SSL cipher into an HTTP request. When

you configure this option, the SSL proxy inserts the actual cipher name, the

SSL version, and the number of significant bits into the HTTP request.

A properly-formatted cipher specification header is in the form

SSLClientCipher: [cipher] version=[version] bits=[bits], where [cipher],

[version], and [bits] represent the actual cipher name, version, and number

of significant cipher bits, respectively.

The ability to insert a cipher specification into a client request is useful for

two primary reasons:

• Inserting cipher information into an HTTP request can ensure that a

client uses a specific cipher strength, thus enhancing the security of the

SSL connection. Also, if the cipher strength of the client is unacceptable,

you can direct them to a "cipher upgrade" path, rather than discarding the

session altogether.

• You can create rules that perform load balancing based on the cipher

strength specified in the inserted header. Thus, using the HTTP request

string variable http_header, you could create a rule such as that shown

in Figure 4.45.

To insert a cipher specification using the Configuration

utility

1. In the navigation pane, click Proxies.

2. Click the Add button.

3. Check the Insert Cipher check box.

4. Click Done.

if (exists http_header "SSLClientCipher") {

if (http_header "SSLClientCipher" contains "bits=128") {

use ( secure_pool )

}

else {

redirect to "<https://%h/upgradebrowser.html>"

}

else {

redirect to "<https://%h/servererror.html>"

}

Figure 4.45 A rule based on cipher strength specified in an HTTP header

1 2 ... 172 173 174 175 176 177 178 179 180 181 182 ... 425 426

Comentarios a estos manuales

Sin comentarios

Dell 3-DNS Especificaciones Pagina 177

Comentarios a estos manuales

Relacionado con productos y manuales para Redes Dell 3-DNS