I would like to submit a RFE (enhancement request) to allow an additional option to Server Response Header setting when creating HTTP/HTTPS LB:

Request to add an option for “Remove” or “Strip” to entirely remove any Server header set by the origin.

This is the default behavior for a BigIP virtual with ASM policy attached, and is the configuration for Silverline. Furthermore it seems a superfluous information disclosure – we already inject ‘x-volterra-location’, so I’d argue we should change defaults to strip Server header entirely.

server-header.png

×

Attachments Open full size