Forum Discussion

Ben_Levin_9028's avatar
Ben_Levin_9028
Icon for Nimbostratus rankNimbostratus
Jan 04, 2017

HSTS on LTM

We are running 11.5.4 on several BIG IPs and want to implement HSTS. I understand the concept of using an iRule or a policy but I have a question. If our member web servers are doing HTTP only and S...
application delivery
hsts
LTM
security
ssl termination
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jan 04, 2017

You shouldn't need to do anything differently.

 

However, HSTS is a commitment to SSL. So if you have any content that is legitimately and only accessible over HTTP, that will immediately break when the client gets the HSTS header.