Hi Tomcat Community, We are seeing and issue that manifests as a cross session “bleeding” scenario. The issue is this:
1. User A make a new request and the request goes to pod A and gets Session1 2. User A's next request then gets redirected to pod B. The request is processed using Session1 3. User B now makes a new request and the request goes to pod B and instead of getting a new session, User B gets the same Session1 as User A We are using https://github.com/redisson/redisson for caching with Tomcat 9.0.58. Given the fixed bugs in the Tomcat changelog, I have suggested trying 9.0.66 or later. However, this suggestion has been met with resistance. For those unfamiliar with Redisson, I think the most important high-level piece from their docs is this: “Redisson's Tomcat Session Manager allows you to store sessions of Apache Tomcat in Redis. It empowers you to distribute requests across a cluster of Tomcat servers. This is all done in non-sticky session management backed by Redis.” I believe we could take a heap dump and get the answer, but at the moment that isn’t something we want to do. My question, at the moment, is pretty simple. How does this interact with Tomcat? Would the session management bugs in Tomcat apply? Best Regards, Douglas Whitfield | Enterprise Architect, OpenLogic<https://www.openlogic.com/?utm_leadsource=email-signature&utm_source=outlook-direct-email&utm_medium=email&utm_campaign=2019-common&utm_content=email-signature-link> Perforce Software<http://www.perforce.com/?utm_leadsource=email-signature&utm_source=outlook-direct-email&utm_medium=email&utm_campaign=2021-common&utm_content=email-signature-link> P: +1 612.517.2100 <tel:> Visit us on: LinkedIn<https://www.linkedin.com/company/perforce?utm_leadsource=email-signature&utm_source=outlook-direct-email&utm_medium=email&utm_campaign=2021-common&utm_content=email-signature-link> | Twitter<https://twitter.com/perforce?utm_leadsource=email-signature&utm_source=outlook-direct-email&utm_medium=email&utm_campaign=2021-common&utm_content=email-signature-link> | Facebook<https://www.facebook.com/perforce/?utm_leadsource=email-signature&utm_source=outlook-direct-email&utm_medium=email&utm_campaign=2021-common&utm_content=email-signature-link> | YouTube<https://www.youtube.com/user/perforcesoftware?utm_leadsource=email-signature&utm_source=outlook-direct-email&utm_medium=email&utm_campaign=2021-common&utm_content=email-signature-link> The Star Tribune recognizes Perforce as a Top Workplace in Minnesota. Read more ><https://www.startribune.com/top-workplaces/571419751/> This e-mail may contain information that is privileged or confidential. If you are not the intended recipient, please delete the e-mail and any attachments and notify us immediately.
