For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mahnsc's avatar
mahnsc
Icon for Nimbostratus rankNimbostratus
Aug 27, 2009

JSessionID Persistence over AJP13

This has probably been asked and answered a hundred times or more on this forum but I'm not getting much luck with the search function.     I get the whole irule based on jsessionid thing--...
application delivery
dev
devops
iRules
mahnsc's avatar
mahnsc
Icon for Nimbostratus rankNimbostratus
Aug 27, 2009
I prefer mod_proxy_http as well but we terminate SSL at the bigip, http to apache, and then from apache to tomcat, jboss, or pramati (depending upon service requested). The main thing that worries me with a mod_proxy setup is all the port translation going on. One absolute url including the scheme in the site's html seems to cause the whole thing to get messy fast (and development never seems to have the funding to fix these kind of problems).

 

 

Still, maybe I should go drastic and swap out mod_jk too. It would make things cleaner (on paper at least).