What Cisco pruduct allows to modify the HTTP traffic?

Miroslav Berkov — Sun, 25 Jan 2015 10:50:58 GMT

I need a quick test of a website or an application without changing the server code, for example, I wish to add cookies to a request header or CORS headers to a server response. So, what Cisco product can do such a job:

HTTP Modifier Rules: provide regexp rules to modify the HTTP header and/or content. You can provide as many modifier rules as you need. Grouping ($1, $2, etc) and special symbols (\r, \n, \t) are allowed. HTTP Debugger will automatically recalculate the Content-Length of the modified content.

You can test HTTP modifier rules for outgoing HTTP traffic by visiting our View Browser Headers page.

Note: when adding a HTTP content modifier rules, make sure to provide match rules for a proper content type.

Regexp Samples:

Append New Parameter To The End Of Header:

Regex: (?=\r\n\r\n)
Value: \r\nAccess-Control-Allow-Origin: *

Delete Existing Parameter From Header:

Regex: User-Agent:.*\r\n
Value:

Replace Existing Parameter In Header:

Regex: (Content-Length:).*(?=\r\n)
Value: $1 12345

Replace HTML Tag In Content:

Regex: (<title>).*(</title>)
Value: $1 new title $2

You can create a modifier rule for a particular request/response from grid's context menu.

Note: to improve the performance, it is recommended to disable the HTTP Modifier, if it is not used.

Important: browsers tend to cache Internet connections, therefore it maybe required to restart a browser for changes to take effect.

...or on Ettercap NG filtering like replace(what, with)
this function replaces the string ’what’ with the string ’with’. They can be binary string and must
be escaped. The replacement is always performed in DATA.data since is the only payload which
gets forwarded. The ’DECODED.data’ buffer is used only internally and never reaches the wire.

example:
replace("ethercap", "ettercap")

Thank you.

This type of function is most

Marvin Rhoads — Sun, 31 May 2015 18:04:48 GMT

This type of function is most commonly performed in a load balancer or "application delivery controller". Cisco has mostly gotten out of that market since discontinuing the ACE product.

Cisco partners with Citrix and recommends the Netscaler product as an ADC. You can download a free trial version of the Netscaler from Citrix. There are a number of common use cases and associated configurations that one can refer to for things like http header rewrite.

You could also use any of the other common ADCs like F5 BigIP, A10 Networks, etc.

topic What Cisco pruduct allows to modify the HTTP traffic? in Web Security

What Cisco pruduct allows to modify the HTTP traffic?

This type of function is most