Solved: Session Timeouts

Brendan O'Flynn · ‎04-23-2007

Hello All,

Anybody shed light on the following issue please?

CSS11501 load balancing between two back-end App servers.

Initial request is port 80 (load balanced), then client is told that object has moved to another secure location (HTTPS URL to login page).

Client then connects to this new location via 443 and this content is also load balanced, by a separate content rule, between both back-end App servers.

All works OK (can login) but after a while (between 1 to 10 mouse clicks) you get the following message:

"Your session has timed out" but only for IE browsers, Firefox always works OK!!

The owner has two content rules - one for port 80 and the other for port 443 (advance balance ssl).

Thanks in advance,

Brendan

Gilles Dufour · ‎04-23-2007

try 'advanced-balance srcip' for your ssl rule.

ie usually uses new sslid very frequently preventing the use of stickyness based on sslid.

Gilles

View solution in original post

Gilles Dufour · ‎04-23-2007

try 'advanced-balance srcip' for your ssl rule.

ie usually uses new sslid very frequently preventing the use of stickyness based on sslid.

Gilles

Brendan O'Flynn · ‎04-24-2007

Gilles,

Great stuff - that resolved the issue (sorry for the delay in getting back to you, we wanted to be sure that everything was OK with customers).

Although I'm still not sure how a particular browser could influence the SSL session IDs that are assigned by the back-end server (is this correct?).

Much obliged for your help with this.

Gilles Dufour · ‎04-24-2007

The server set the session id, but its up to the browser to decide to use it or not.

If the browser sends a null session id, the server will generate a new one.

IE is well-known for sending null session id frequently to force renegotiation with the server.

Not sure what is the purpose of this, but it is annoying when doing stickyness.

Gilles.

Brendan O'Flynn · ‎04-24-2007

Gilles,

Thanks for the info - that's very enlightening.

Many thanks again,

Brendan