Forum Discussion

Eric_Grepps_264's avatar
Eric_Grepps_264
Icon for Nimbostratus rankNimbostratus
Nov 14, 2006

Encrypt URL's and querystrings

I know about the SSN and credit card scrubber, but is it possible to search the payload for http href's and replace them with an encrypted string them decrypt it on the way back in.

 

 

We have some info in our querystrings that we would like to hide using the loadbalancer until the development staff can make the appropriate change to the code.

 

 

Any help would be greatly appreciated.

 

 

Thanks,

 

Eric
application delivery
dev
devops
iRules

2 Replies

Sort By
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Nov 15, 2006
    Hi,

     

     

    You should be able to use the credit card scrubber rule (Click here) as an example for inspecting and replacing the HTTP response content. You could search for the URLs/URIs in the response content and use the AES functions (Click here) to encrypt the content. On subsequent responses, you could use HTTP::header or HTTP::uri to decrypt the strings.

     

     

    If there is sensitive data in the HTTP response headers, you would need to en/decrypt that seperately using the HTTP::header functions (Click here).

     

     

    Try starting with this and repost with any questions.

     

     

    Aaron
  • Tom_Spector_50's avatar
    Tom_Spector_50
    Historic F5 Account
    Nov 20, 2006
    Please note that this would work provided there is no client side logic that uses these links or information in these links.