SSL会话迁移

时间:2010-09-22 13:57:16

标签: tomcat tomcat6

我使用由httpd mod_proxy_balancer(HTTP / HTTPS)平衡的NIO HTTP连接器负载“按书”配置了我的tomcat(6.0.29)群集。使用HTTP时,我可以杀死服务器并仍然使用我的会话完美。使用HTTPS时,会话在故障转移时丢失。

任何人都有这种问题,或者可以给我一个暗示我应该调试的地方?日志显示没有错误。我当前的连接器如下所示:

<Connector port="8080" 
           protocol="org.apache.coyote.http11.Http11NioProtocol" 
           connectionTimeout="5000"
           maxThreads="500"
           minSpareThreads="25"
           maxSpareThreads="75"
           acceptCount="10"
           redirectPort="443"
           proxyName="www.govdigital.com.br"
           proxyPort="80" />

httpd proxy.conf:

#SSL
LoadModule ssl_module modules/mod_ssl.so
Listen 443
NameVirtualHost *:443
<VirtualHost _default_:443>
  ErrorLog logs/ssl_error_log
  TransferLog logs/ssl_access_log
  LogLevel warn
  SSLEngine on
  SSLProtocol all -SSLv2
  SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW

  #Certificate, PK and CA Bundle
  SSLCertificateFile /srv/httpd/exported-pem.crt
  SSLCertificateKeyFile /srv/httpd/exported.key
  SSLCACertificateFile /srv/httpd/cabundle.pem
</VirtualHost>

#Proxy
ProxyRequests Off
ProxyPass / balancer://mycluster/ stickysession=JSESSIONID|jsessionid
ProxyPassReverse / balancer://mycluster/
<Proxy balancer://mycluster>
    AddDefaultCharset Off
    #Working nodes
    BalancerMember http://10.1.1.2:8080 route=worker1
    BalancerMember http://10.1.1.3:8080 route=worker2
</Proxy>

#Cache
CacheEnable disk /decorators
CacheEnable disk /scripts
CacheRoot /ram/cache/
CacheDirLevels 6
CacheDirLength 3

CacheMaxFileSize 1000000
CacheMinFileSize 1

#Agressive caching
CacheIgnoreCacheControl On
CacheIgnoreNoLastMod On
CacheIgnoreQueryString Off
CacheIgnoreHeaders None
CacheLastModifiedFactor 0.1
CacheDefaultExpire 3600
CacheMaxExpire 86400
CacheStoreNoStore On
CacheStorePrivate On

ErrorDocument 503 "Bad Servers<br/>No donuts for you"

提前感谢:)

0 个答案:

没有答案