Load Balancing, Spring Security, ConcurrentSessionFilter

I have a Spring 2.5.6 / Flex installation and working with Spring Security 2.0.4. A backup balancer was recently installed (A Foundry ServerIron 4g http://www.foundrynet.com/products/a...ems/si-4g.html ), and now I get cross-domain errors. Basically, the load balancer disconnects the request to myloadbalancer.abc.com, and myrealserver1.abc.com is returned as the domain name. Spring security forwards the request to the real server in some way. How can I get around this?

Also ConcurrentSessionFilter no longer works. The application is configured to disable simultaneous logins, but this feature stopped after the application was placed on the load balancer. I believe that several Oracle Application Servers are also grouped together. I had never done clustering or load balancing before, and I did not know that software had to be written differently in certain areas.

This sounds like separate issues to me, but I need help for both.

+3
source share
1 answer

Regarding your second problem:

ConcurrentSessionFilter (.. ), .

. , node.

Spring ConcurrentSessionController . HttpSessionEventPublisher ApplicationEvents .

, - , node, . HttpSessionEventPublisher , , , . node , ConcurrentSessionController .

, : SessionRegistry (, ).

+3

Source: https://habr.com/ru/post/1702639/


All Articles