Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Session Timeouts

Hello All,

Anybody shed light on the following issue please?

CSS11501 load balancing between two back-end App servers.

Initial request is port 80 (load balanced), then client is told that object has moved to another secure location (HTTPS URL to login page).

Client then connects to this new location via 443 and this content is also load balanced, by a separate content rule, between both back-end App servers.

All works OK (can login) but after a while (between 1 to 10 mouse clicks) you get the following message:

"Your session has timed out" but only for IE browsers, Firefox always works OK!!

The owner has two content rules - one for port 80 and the other for port 443 (advance balance ssl).

Thanks in advance,

Brendan

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: Session Timeouts

try 'advanced-balance srcip' for your ssl rule.

ie usually uses new sslid very frequently preventing the use of stickyness based on sslid.

Gilles

4 REPLIES
Cisco Employee

Re: Session Timeouts

try 'advanced-balance srcip' for your ssl rule.

ie usually uses new sslid very frequently preventing the use of stickyness based on sslid.

Gilles

Community Member

Re: Session Timeouts

Gilles,

Great stuff - that resolved the issue (sorry for the delay in getting back to you, we wanted to be sure that everything was OK with customers).

Although I'm still not sure how a particular browser could influence the SSL session IDs that are assigned by the back-end server (is this correct?).

Much obliged for your help with this.

Cisco Employee

Re: Session Timeouts

The server set the session id, but its up to the browser to decide to use it or not.

If the browser sends a null session id, the server will generate a new one.

IE is well-known for sending null session id frequently to force renegotiation with the server.

Not sure what is the purpose of this, but it is annoying when doing stickyness.

Gilles.

Community Member

Re: Session Timeouts

Gilles,

Thanks for the info - that's very enlightening.

Many thanks again,

Brendan

301
Views
4
Helpful
4
Replies
CreatePlease to create content