Hello,
In attempting to show improvements in Session Caching I have done the following:
# Against a single web server:
Openssl s_client -connect web-tst-1:443 -state -reconnect > /tmp/mylog.txt 2>&1
Then I would `grep -i reuse /tmp/mylog.txt` and it shows that the session was reused.
# Against the load balancer which is LVS (linux virtual server w/ TUN method)
Openssl s_client -connect lb-web-tst:443 -state -reconnect > /tmp/mylog.txt 2>&1
Then I would `grep -i reuse /tmp/mylog.txt` and it shows that the session was never reused and a new one was created everytime.
I then created a more detailed test using openssl s_client and dumping the session using `-sess_out` and then tried to make follow up calls using `-sess_in` and providing the session ID.
Again if I hit a single server the ID is reused but if I go through the load balancer and the request hit difference servers that session is not reused.
I tried downing a web server behind the load balancer so only 1 server was up and the session was reused.
So I guess I have two questions:
1. Is the manner in which I am testing SSLSessionCache correct?
2. My understanding is that the Session cache is shared amongst all the web servers so the SessionID would be reused, if that correct?
Michael
-----Original Message-----
From: Nick Kew [mailto:nick@xxxxxxxxxxxx]
Sent: December 14, 2010 11:59 AM
To: users@xxxxxxxxxxxxxxxx
Subject: Re: Apache and distcache help
On 14 Dec 2010, at 16:10, Michael Gale wrote:
> Hello,
>
> Does apache still support distcache?
Yes. From Apache 2.3 there's general support and various modules use it.
> I am running the following i386 packages:
> httpd-2.2.3-11.el5_2.centos.4
> distcache-1.4.5-14.1
Can't speak for centos packages, but 2.2.3 is a very old apache version.
> Using `openssl s_client -connect host:port -state -reconnect` shows that SSL Session caching is working when I hit the web servers directly, I tested each one individually. However when I hit the load balancer (linux virtual server) and the requests are spread across the web servers the session cache appears to be not working.
Not working? What is the difference between what you expect and what you see?
--
Nick Kew
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|