HSTS via irule

Hello,

Your iRules looks fine. Are you sure that the HSTS is not enabled? You can test your SSL connection with https://www.ssllabs.com/ssltest/index.html and check the results.

Also, your can check your ltm logs for errors.

Regards

Hello pedinopa,

You should enable HSTS only on virtual servers with client SSL profiles.You can enable HSTS on HTTPS Virtual server using the below iRule.

when HTTP_RESPONSE { 
if { !([ HTTP::header exists "Strict-Transport-Security“ ])} 
{ HTTP::header insert "Strict-Transport-Security" "16070400" } 
}

Hello pedinopa,

You should enable HSTS only on virtual servers with client SSL profiles.You can enable HSTS on HTTPS Virtual server using the below iRule.

when HTTP_RESPONSE { 
if { !([ HTTP::header exists "Strict-Transport-Security“ ])} 
{ HTTP::header insert "Strict-Transport-Security" "16070400" } 
}

The problem with your irule is that "20110926" is a past date. It needs to be a period of time starting from the runtime. Try this one:

when RULE_INIT {
    set static::expires [clock scan "12 month"]
}
when HTTP_RESPONSE {
    HTTP::header insert Strict-Transport-Security "max-age=[expr {$static::expires - [clock seconds]}]; includeSubDomain"
}

.

that did it thank you