Project

General

Profile

Actions

Task #5606

closed

Configure haproxy so that the authorization service connections are sticky

Added by Andrea Dell'Amico almost 9 years ago. Updated almost 9 years ago.

Status:
Closed
Priority:
Normal
Category:
System Application
Target version:
Start date:
Nov 02, 2016
Due date:
% Done:

100%

Estimated time:
Infrastructure:
Production

Description

The authorization service does not use session cookies.
haproxy has to be configured to enable sticky sessions even in absence of a session cookie from the application.

Actions #1

Updated by Andrea Dell'Amico almost 9 years ago

  • Status changed from New to In Progress
  • % Done changed from 0 to 70

@lucio.lelii@isti.cnr.it I have a candidate solution to be tested. haproxy will use a table of source IPs, with entries expiring after 10 minutes (configurable). Let me know when I can activate it.

Actions #2

Updated by Andrea Dell'Amico almost 9 years ago

  • Status changed from In Progress to Closed
  • % Done changed from 70 to 100

It works. The config lines added to the authorization backends are:

       balance leastconn
       stick-table type ip size 1m expire 10m
       stick on src
Actions

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 8.91 MB)