Re: [phplib] session4 accoss ips From: alex black (enigma <email protected>)
Date: 05/17/01

> Hi Daniel,
>
> You only have 2 choices:
>
> 1) You make sure all session-data is in _one_ place (e.g. A database
> instead of many filesystems)
>
> 2) You loadbalancer has the feature to make sure the same
> session/connection always stays with one machine. (I know the F5 does
that)
>
> Please take note that if you go for option 2 with your setup
> (filesystem-session) you will not have a fail-safe/fail-over situation.

If I may amend this:
    while it is true that users will lose session if they webserver they are
"stuck to" goes down, all they need to do is sign in again. in rare cases
this can result in data loss.

anyway, the best way is to write a session save handler which logs all your
session data to your DB, then you can run a totally stateless cluster of (x)
webservers which are _exactly_ the same at all times.

_alex

> Take care,
>
> Andre
>
> Daniel Bondurant wrote:
>
> > I am running phplib with session4.
> >
> > I changed the ip address of the server (moving from behind firewall to
> > outside), and the sessions that were still active starting doing strange
> > things. I when I logged in, I ended up logged in as someone else (who
> > had an active session), and had their full permissions. I fixed it by
> > destroying all the php4 sessions in /tmp (on apache/linux)
> >
> > the only reason this concerns me, is we might be moving to load
> > balancing servers shortly, where each machine has the same ip, but the
> > session vars will be stored on the different machine depending on which
> > one was assigned.
> >
> > In this circumstance, is there anyway to insure that the same phplib
> > session will always get the same machine, and has anyone encountered
> > this problem before.
> >
> > thanks
> >
> >
> >
> >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: phplib-unsubscribe <email protected>
> > For additional commands, e-mail: phplib-help <email protected>
> >
> >
> >
>
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: phplib-unsubscribe <email protected>
> For additional commands, e-mail: phplib-help <email protected>
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: phplib-unsubscribe <email protected>
For additional commands, e-mail: phplib-help <email protected>