Bug 40400 - a route value specified by stickysession is invalid
Summary: a route value specified by stickysession is invalid
Status: RESOLVED FIXED
Alias: None
Product: Apache httpd-2
Classification: Unclassified
Component: mod_proxy_balancer (show other bugs)
Version: 2.2.2
Hardware: All All
: P3 normal (vote)
Target Milestone: ---
Assignee: Apache HTTPD Bugs Mailing List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-09-03 04:40 UTC by Tomokazu Harada
Modified: 2006-11-08 09:44 UTC (History)
0 users



Attachments
a patch for mod_proxy_balancer (447 bytes, patch)
2006-09-03 04:42 UTC, Tomokazu Harada
Details | Diff
patch to filter out sticky session from url given as parameter (575 bytes, patch)
2006-09-03 12:22 UTC, Ruediger Pluem
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Tomokazu Harada 2006-09-03 04:40:20 UTC
In stickyseession mode, a route value is extracted from request line parameters 
or cookies. The route value from request line is invalid when many parameters 
is in a request line.
For example, if a request line is
  http://www.examples.com/foo?bar=abc.01&baz=xyz.02
and stickyseession is "bar", the extracted route value is "01&baz=xyz.02". But 
supposed (and hoped) route value is "01".

This is caused by the parameter separator is '?'. The right separator is '&'. A 
simple patch is available.
Comment 1 Tomokazu Harada 2006-09-03 04:42:05 UTC
Created attachment 18810 [details]
a patch for mod_proxy_balancer
Comment 2 Ruediger Pluem 2006-09-03 12:21:21 UTC
Your patch would break session stickyness for other backends (e.g. java
backends) which encode the session id differently into the URL like
www.someplace.com/somewhere/;jsessionid=gggfgdufdfoef.server?parameter=value.
Please give the attached patch a try. It accepts ? and & as separators.
Comment 3 Ruediger Pluem 2006-09-03 12:22:23 UTC
Created attachment 18812 [details]
patch to filter out sticky session from url given as parameter
Comment 4 Tomokazu Harada 2006-09-04 15:16:41 UTC
I tried the above patch. It's OK.
Will the patch be merged to 2.2.x line?
Comment 5 Ruediger Pluem 2006-09-04 19:50:52 UTC
Thanks for testing. First of all I need to commit the patch to the trunk. I just
did that as r440160 (http://svn.apache.org/viewvc?view=rev&rev=440160). If there
are no further comments by other developers I will propose this patch for
backport to 2.2.x.
Comment 6 Ruediger Pluem 2006-09-06 07:30:19 UTC
Proposed for backport to 2.2.x as r440643
(http://svn.apache.org/viewvc?view=rev&rev=440643).
Comment 7 Jim Jagielski 2006-11-08 09:44:23 UTC
in 2.2.4-dev and trunk