Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Outbound load balancing, session cookies and sticky outbound flows

    2.0-RC Snapshot Feedback and Problems - RETIRED
    4
    10
    2803
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      emptysands last edited by

      Is there a method to bind outbound flows to a give site/IP to a particular multi-wan channel?

      Otherwise web sites that track IP in sessions cookies will constant expire connections.

      Running: 2.0-BETA4  (i386) built on Mon Oct 4 00:44:29 EDT 2010

      1 Reply Last reply Reply Quote 0
      • jimp
        jimp Rebel Alliance Developer Netgate last edited by

        System > Advanced, Misc tab, check "Use sticky connections".

        1 Reply Last reply Reply Quote 0
        • M
          mastermindpro last edited by

          I was told a few months ago that sticky connections didn't work yet.  Has that changed?

          1 Reply Last reply Reply Quote 0
          • jimp
            jimp Rebel Alliance Developer Netgate last edited by

            Last I heard they worked on 2.0 but did not work on 1.2.x

            1 Reply Last reply Reply Quote 0
            • E
              emptysands last edited by

              @jimp:

              System > Advanced, Misc tab, check "Use sticky connections".

              Thanks. I'm wondering if it should be on by default.

              1 Reply Last reply Reply Quote 0
              • K
                krisken last edited by

                @emptysands:

                @jimp:

                System > Advanced, Misc tab, check "Use sticky connections".

                Thanks. I'm wondering if it should be on by default.

                Do the sticky connections work at you?

                1 Reply Last reply Reply Quote 0
                • E
                  emptysands last edited by

                  @krisken:
                  Do the sticky connections work at you?

                  Once I found the option, outbound sticky connections did start to work.

                  1 Reply Last reply Reply Quote 0
                  • K
                    krisken last edited by

                    @emptysands:

                    @krisken:
                    Do the sticky connections work at you?

                    Once I found the option, outbound sticky connections did start to work.

                    Here it did work if i'm fast enough with browsing.  If i don't do about 10 seconds anything on the website, it didn't work at all.  Eg typing in username/password for eg a forum was quite difficult :)

                    1 Reply Last reply Reply Quote 0
                    • E
                      emptysands last edited by

                      @krisken:

                      @emptysands:

                      @krisken:
                      Do the sticky connections work at you?

                      Once I found the option, outbound sticky connections did start to work.

                      Here it did work if i'm fast enough with browsing.  If i don't do about 10 seconds anything on the website, it didn't work at all.  Eg typing in username/password for eg a forum was quite difficult :)

                      Sounds like it is not working or not turned on.  That is a classic example of source IP flipping causing the auth cookie for a forum to reset.

                      1 Reply Last reply Reply Quote 0
                      • K
                        krisken last edited by

                        I've set it on, but it could be that it isn't working.
                        For a forum or a directadmin session, that's quite allright.  But not for my homebanking.  But i did the work-around (see my topic) and well…we'll see if that does the job :)

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post

                        Products

                        • Platform Overview
                        • TNSR
                        • pfSense
                        • Appliances

                        Services

                        • Training
                        • Professional Services

                        Support

                        • Subscription Plans
                        • Contact Support
                        • Product Lifecycle
                        • Documentation

                        News

                        • Media Coverage
                        • Press
                        • Events

                        Resources

                        • Blog
                        • FAQ
                        • Find a Partner
                        • Resource Library
                        • Security Information

                        Company

                        • About Us
                        • Careers
                        • Partners
                        • Contact Us
                        • Legal
                        Our Mission

                        We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

                        Subscribe to our Newsletter

                        Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

                        © 2021 Rubicon Communications, LLC | Privacy Policy