LTM iRule to manage users sessions (like APM does)

Hi,

A customer of mine would like to implement the same logic of APM session management (done with APM MRHSession cookie) using an LTM iRule to keep track of LTM session cookies. Once a user logs out explicitly from the application (via a particular URL like /logout.html), LTM would simply invalidate (expire) his LTM session cookie to forbid that the same cookie is reused by another user.

But what about the case of multiple users concurrently logged in into the same application? Should I keep track of each session id cookie in a TCL array, where i would put username and session cookie associated, but how to manage such array (remove, add new entries in the array)

Would this work? Do you have an example?

Thanks for your feedback/thoughts.