The ACL matches rely on the extract_cookie_value() function as used for for patterns. This permits ACLs to match cookie values based on the cookie name instead of having to perform substring matching on the cookie header.