Forum Discussion
DaveC_53879
Oct 04, 2011Nimbostratus
Persistence problem
I have an iRule in place that is logging clients that do and do not submit persistence cookies for a particular site as one customer is regularly losing persistence, sometimes being directed to another server in rotation, and losing all session info which generates a time-out and forces them to re-authenticate. I can see in the logs that many exisitng sessions from this customer will stop presenting the persistence cookie for a few seconds, may or may not get kicked out, and then start working correctly for a few minutes. This can happen with one or more clients from the same address and usually effects everyone currently connected form that one customer's space. Not sure if this is the right place to ask, but what can be causing this? I'm using an encrypted cookie with a 20-minute time-out, but the failures are happening before the time-out. So far I have not been able to talk to the customer's IT folks. Thanks for looking.
- nitassEmployeeis it possible to run httpwatch while reproducing the problem?
- Michael_YatesNimbostratus
- DaveC_53879NimbostratusSo far we haven't been able to get anyone technical on the other end to help us troubleshoot this issue. I'm sure we could figure it out rather quickly if we could get onto one of their machines. I'm not able to duplicate the issue.
- DaveC_53879NimbostratusThe customer is NATing, so all clients have the same IP but different port s. I read about OneConnect but don't see how that would help. It looks like it's more of a resource saver and might make it worse, unless I'm reading it wrong. The site is really an application with many users other than the ones reporting problems.
- Michael_YatesNimbostratusIf they Client is NAT'ing and appears to be coming from a single IP Address then the application of the OneConnect Profile should resolve your issue.
- DaveC_53879NimbostratusMichael,
- Michael_YatesNimbostratusDo you have any idea what could be causing that and will the OneConnect maintain persistence whether or not they send the persistence cookie?
when HTTP_REQUEST { set LogString "Client [IP::client_addr]:[TCP::client_port] -> [HTTP::host][HTTP::uri]" log local0. "=============================================" log local0. "$LogString (request)" foreach aHeader [HTTP::header names] { log local0. "$aHeader: [HTTP::header value $aHeader]" } log local0. "=============================================" } when HTTP_RESPONSE { log local0. "=============================================" log local0. "$LogString (response) - status: [HTTP::status]" foreach aHeader [HTTP::header names] { log local0. "$aHeader: [HTTP::header value $aHeader]" } log local0. "=============================================" }
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects