Uploaded image for project: 'mod_cluster'
  1. mod_cluster
  2. MODCLUSTER-268

emptySessionPathed JSESSIONID.jvmRoute cookies results in requests being improperly sent to mod_cluster workers

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Minor
    • MOD_CLUSTER_1_0_10_GA_CP03
    • MOD_CLUSTER_1_0_10_GA_CP01
    • None
    • None
    • Hide

      1) Set up JBoss with mod_cluster/httpd.
      2) Configure JBoss for empty session path session cookies.
      3) Launch and access a JBoss application through the loadbalancer, thus creating a jsessionid.jvmroute cookie.
      4) Access some static content dir/file served by apache. The request should be routed improperly to mod_cluster workers and result in 503s/"All workers are in error state". Removing the jsessionid.jvmroute cookie allows the static content request to succeed again.

      Show
      1) Set up JBoss with mod_cluster/httpd. 2) Configure JBoss for empty session path session cookies. 3) Launch and access a JBoss application through the loadbalancer, thus creating a jsessionid.jvmroute cookie. 4) Access some static content dir/file served by apache. The request should be routed improperly to mod_cluster workers and result in 503s/"All workers are in error state". Removing the jsessionid.jvmroute cookie allows the static content request to succeed again.
    • Hide

      Use ProxyPass/ProxyPassMatch cond ! for the static URL you want to

      Show
      Use ProxyPass/ProxyPassMatch cond ! for the static URL you want to

    Description

      Empty session paths can result in requests being sent to mod_cluster workers that shouldn't be. For example, if a request for apache-served static content has an applicable JSESSIONID (either because the path matches the context or its an empty path and matches everything) with a route valve appended to it, then the static content request is directed to the mod_cluster balancer, resulting in 503s and "All workers are in error state".

      So it looks like the presence of a jsessionid.jvmroute cookie causes apache/mod_cluster to improperly route the request even if its a context not handled by any mod_cluster workers.

      Attachments

        Activity

          People

            rhn-engineering-jclere Jean-Frederic Clere
            rhn-support-aogburn Aaron Ogburn
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: