For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Feb 12, 2014

While there is no prescribed standard limit for cookie sizes, RFC 6265 recommends that a "user-agent" should at least be able to handle 4096 bytes per cookie. Hopefully you don't have cookies that big, but nonetheless it's nothing that the BIG-IP persistence table can't handle. I'd also add that the example JSESSIONID value that you've provided is not uncommonly long.