For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Julian_Grunnell's avatar
Julian_Grunnell
Icon for Nimbostratus rankNimbostratus
Jun 12, 2007

Cookie Rewrite & ASPSESSIONID

Hi - got a problem with session persistence and am wondering if an iRule can help? The scenario is:     10 x (customer) IIS web servers that make use of ASPSESSIONID's.     A pair of LTM's...
application delivery
dev
devops
iRules
Julian_Grunnell's avatar
Julian_Grunnell
Icon for Nimbostratus rankNimbostratus
Jun 12, 2007

Posted By hoolio on 06/12/2007 8:01 AM

 

 

Why not just use cookie insert persistence? It eliminates any dependence on the nodes setting cookies and is much less complex to configure and maintain.

 

 

Aaron

 

 

 

 

Cookie insert or rewrite, we don't mind. The problem appears to be the presence of the ASPSESSIONID which is unique to each web server and holds user information.

 

 

So as willms has put if you can use the ASPSESSIONID when present somehow to store the web server details and use this in a cookie to ensure the client always gets served by the same web server.

 

 

This would do away with the conventional cookie setup and let the iRule handle it.

 

 

Thanks - J.