Friday, January 11, 2008

mod_proxy_balancer and IIS session affinity one small step

I recently need to configure a load balanced apache reverse proxy with two IIS servers on the backend. I found this wonderful link on google with instructions on how to do just that. I only have one small correction to the wonderful information located at

http://macacochefe.blogspot.com/2007/08/iis-creating-cookie-affinity-load.html

6 – Type “mycluster.node1; path=/;” in the Custom Header Value

In his example should be...

6 – Type “BALANCEID=mycluster.node1; path=/;” in the Custom Header Value

Additionally in the past when I have seen auth leaked to my webservers they normally ignore Auth string and server up the content. Apache will issue a 401 Authorization required even if no type of authentication is required and or configured for that site. If you are running a reverse proxy that does not require auth you can set the following in your virtual server config to prevent this behavior. It is probably overkill but it works.

RequestHeader set REMOTE_USER ""
RequestHeader set X-HTTP_AUTHORIZATION ""
RequestHeader set HTTP_AUTHORIZATION ""
RequestHeader set AUTHORIZATION ""

1 comments:

RodrigoSol said...

Hi

The information was corrected in my blog.

Thanks,

Rodrigo Sol