Session Persistence

[Sergey A. Osokin]

Hi Morgan,

hope you're doing well.

On Wed, Mar 02, 2022 at 06:45:15PM +0300, Morgan Kisienya wrote:
> Hi,
> 
> We are running nginx opensource with modsecuity. Nginnx is a proxy server.
> 
> We are also running an application, (which we proxy using nginx) that
> creates reports and downloads images.
> 
> We are facing an issue with nginx session persistence.
> 
> During report creation, not all images are downloaded to the report. When
> the page is refreshed, other images different from the initial ones are
> displayed.
> 
> Nginx access.log shows the following
> 
> GET /prod/reportImage?rnd=1661411659&image=img_0_0_5 HTTP/1.1" 500 1692
> 
> Modscurity log shows the following

[...]

The hash-based [1] session persistence supported by the NGINX OSS, NGINX Plus
supports cookie-based session persistence, including sticky cookie [2],
https://www.nginx.com/products/nginx/load-balancing/#session-persistence

References:
[1] http://nginx.org/en/docs/http/ngx_http_upstream_module.html#hash
[2] http://nginx.org/en/docs/http/ngx_http_upstream_module.html#sticky

-- 
Sergey A. Osokin