[prev in list] [next in list] [prev in thread] [next in thread] 

List:       loadbalancing-l
Subject:    Re: [load balancing] Problems with using SSL Persistence with
From:       "John Hall" <j.hall () f5 ! com>
Date:       2003-01-14 0:46:45
[Download RAW message or body]


Tony's right and there is one more possible solution which might work for
you, if you can modify your web application (may or may not be possible).
Since you are using frames, you could encode a session identifier in the
URL's used on the page with the <FRAME..> tags and below.  Since the sub-
frames URL's generally don't show up in the Location Bar, having a session
ID there might be palatable.  It's not the best solution, but it does have
the advantage of working in most circumstances.

If you want to use the SSL Termination / cookie persistence option, then
the BIG-IP product can do the SSL termination and cookie persistence
internally (depending on the featureset and software version you have) and
there are SSL acceleration hardware options and/or licenses available for
just about all BIG-IP hardware platforms.

-- 
JMH
BIG-IP Core Test Manager
F5 Networks, Inc.

tony bourke wrote:
> 
> Hello Vivek,
> 
> There is a known bug with many combinations of Microsoft operating systems
> and browsers, which bascially makes SSL session ID persistence worthless.
> 
> http://support.microsoft.com/default.aspx?scid=kb;EN-US;q265369
> 
> The only solutions are 1) Make sure your users are using versions that
> aren't affected (unrealistic in most cases) 2) Use source-IP persistence
> (not terribly efficient) or 3) use an SSL accelerator to decrypt the
> traffic before it hits the load balancer and use regular cookie-based
> persistence.
> 
> I don't know if that's the problem you are having, but it's one you're
> likely to come accross.
> 
> Hope that helps,
> 
> Tony
> 
> --
> -------------- -- ---- ---- --- - - - -  -  -- -  -  -  -   -     -
> Tony Bourke                             tony@vegan.net
____________________
The Load Balancing Mailing List
Unsubscribe:    mailto:majordomo@vegan.net?body=unsubscribe%20lb-l
Archive:        http://vegan.net/lb/archive
LBDigest:       http://lbdigest.com
MRTG with SLB:  http://vegan.net/MRTG
Hosted by:	http://www.tokkisystems.com



____________________
The Load Balancing Mailing List
Unsubscribe:    mailto:majordomo@vegan.net?body=unsubscribe%20lb-l
Archive:        http://vegan.net/lb/archive
LBDigest:       http://lbdigest.com
MRTG with SLB:  http://vegan.net/MRTG
Hosted by:	http://www.tokkisystems.com

[prev in list] [next in list] [prev in thread] [next in thread]