[jboss-user] [Clustering/JBoss] - Potential valid session id overlap?

[jowizzle]

I have a concern about  a simple load balanced setup: a cisco css/vip that handles www.foo.com, and two independent JBoss AS 4.2.2 instances, node1 and node2.  Each JBoss is fronted by Apache httpd and mod_jk.  The mod_jks are also independent, i.e., they have no knowledge of one another and do not perform load balancing.

Since these two nodes are independent, they would each independently generate a value for the JSESSIONID cookie. Suppose a user Jim logs in and is directed to node1.  Node1 generates "abc".  Suppose a user Bob logs in and is directed to node2.  Node2 also generates abc.  Both sessions remain valid.  Upon his next request, if Jim were to be directed to node2, would he assume Bob's session?

If not, why not?  If so, how does one set up a similar simple load balancing solution?  My applications are not distributable, so I have no need for session replication.  I want simple sticky sessions.

Thanks very much for any comments, insight or advice.



View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4118944#4118944

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4118944