System and method for sharing stateful information
In one embodiment, a method includes receiving a HTTP request from a client device, the HTTP request initiating a user session. The method further includes dispatching the HTTP request to a selected application server of a set of application servers. In addition, the method includes servicing the request. Moreover, the method includes storing stateful information as at least one object in a central object store, wherein each of the at least one object is accessible via a lookup key. Also, the method includes generating a cookie. Further, the method includes encrypting into the cookie each lookup key for the at least one object. In addition, the method includes transmitting a response to the client device, the response comprising the cookie.
1. A method comprising, on a computer system comprising a web server and a set of application servers:
receiving, at the web server, a hypertext transfer protocol (HTTP) request from a client device, the HTTP request initiating a user session;
the web server dispatching the HTTP request to a first selected application server of the set of application servers based, at least in part, on a load-balancing scheme;
the first selected application server servicing the request;
responsive to the servicing, the first selected application server storing stateful information for the user session as at least one object in a central object store that is shared across the set of application servers, wherein each of the at least one object is accessible via a lookup key;
the first selected application server generating a cookie;
the first selected application server encrypting into the cookie each lookup key for the at least one object;
the web server transmitting a response to the client device, the response comprising the cookie;
the web server receiving a subsequent request in relation to the user session from the client device, the subsequent request comprising the cookie;
the web server dispatching the subsequent request to a second selected application server of the set of application servers based, at least in part, on the load-balancing scheme, wherein the second selected application server is different from the first selected application server, wherein each lookup key for the at least one object is decrypted from the cookie; and
using each decrypted lookup key, the second selected application server retrieving the stateful information from the central object store.
2. The method of claim 1 , comprising:
the second selected application server servicing the subsequent request;
the second selected application server storing additional stateful information for the user session in the central object store;
the second selected application server generating an updated cookie;
the second selected application server encrypting into the updated cookie one or more lookup keys for the additional stateful information; and
the web server transmitting a second response to the client device, the second response comprising the updated cookie.
3. The method of claim 1 , wherein each lookup key of the at least one lookup key comprises a session-independent lookup key that identifies a particular object of the central object store.
4. The method of claim 3 , wherein the at least one lookup key comprises a plurality of session-independent lookup keys, each session-independent lookup key identifying a particular object of the central object store.
5. The method of claim 1 , wherein the encrypting comprises utilizing a security key that is common across the set of application servers.
6. The method of claim 1 , comprising performing the method for each of a plurality of client devices.
7. An information handling system comprising a web server and a set of application servers, wherein the web server in combination with the set of application servers are operable to implement a method comprising:
receiving, at the web server, a hypertext transfer protocol (HTTP) request from a client device, the HTTP request initiating a user session;
the web server dispatching the HTTP request to a first selected application server of the set of application servers based, at least in part, on a load-balancing scheme;
the first selected application server servicing the request;
responsive to the servicing, the first selected application server storing stateful information for the user session as at least one object in a central object store that is shared across the set of application servers, wherein each of the at least one object is accessible via a lookup key;
the first selected application server generating a cookie;
the first selected application server encrypting into the cookie each lookup key for the at least one object;
the web server transmitting a response to the client device, the response comprising the cookie;
the web server receiving a subsequent request in relation to the user session from the client device, the subsequent request comprising the cookie;
the web server dispatching the subsequent request to a second selected application server of the set of application servers based, at least in part, on the load-balancing scheme, wherein the second selected application server is different from the first selected application server, wherein each lookup key for the at least one object is decrypted from the cookie; and
using each decrypted lookup key, the second selected application server retrieving the stateful information from the central object store.
8. The information handling system of claim 7 , wherein the method comprises:
the second selected application server servicing the subsequent request;
the second selected application server storing additional stateful information for the user session in the central object store;
the second selected application server generating an updated cookie;
the second selected application server encrypting into the updated cookie one or more lookup keys for the additional stateful information; and
the web server transmitting a second response to the client device, the second response comprising the updated cookie.
9. The information handling system of claim 7 , wherein each lookup key of the at least one lookup key comprises a session-independent lookup key that identifies a particular object of the central object store.
10. The information handling system of claim 9 , wherein the at least one lookup key comprises a plurality of session-independent lookup keys, each session-independent lookup key identifying a particular object of the central object store.
11. The information handling system of claim 7 , wherein the encrypting comprises utilizing a security key that is common across the set of application servers.
12. The information handling system of claim 7 , the method comprising performing the method for each of a plurality of client devices.
13. A computer-program product comprising a non-transitory computer-usable medium having computer-readable program code embodied therein, the computer-readable program code adapted to be executed to implement a method comprising:
receiving, at a web server, a hypertext transfer protocol (HTTP) request from a client device, the HTTP request initiating a user session;
the web server dispatching the HTTP request to a first selected application server of a set of application servers based, at least in part, on a load-balancing scheme;
the first selected application server servicing the request;
responsive to the servicing, the first selected application server storing stateful information for the user session as at least one object in a central object store that is shared across the set of application servers, wherein each of the at least one object is accessible via a lookup key;
the first selected application server generating a cookie;
the first selected application server encrypting into the cookie each lookup key for the at least one object;
the web server transmitting a response to the client device, the response comprising the cookie;
the web server receiving a subsequent request in relation to the user session from the client device, the subsequent request comprising the cookie;
the web server dispatching the subsequent request to a second selected application server of the set of application servers based, at least in part, on the load-balancing scheme, wherein the second selected application server is different from the first selected application server, wherein each lookup key for the at least one object is decrypted from the cookie; and
using each decrypted lookup key, the second selected application server retrieving the stateful information from the central object store.
14. The computer-program product of claim 13 , wherein the method comprises:
the second selected application server servicing the subsequent request;
the second selected application server storing additional stateful information for the user session in the central object store;
the second selected application server generating an updated cookie;
the second selected application server encrypting into the updated cookie one or more lookup keys for the additional stateful information; and
the web server transmitting a second response to the client device, the second response comprising the updated cookie.
15. The computer-program product of claim 13 , wherein each lookup key of the at least one lookup key comprises a session-independent lookup key that identifies a particular object of the central object store.
16. The computer-program product of claim 15 , wherein the at least one lookup key comprises a plurality of session-independent lookup keys, each session-independent lookup key identifying a particular object of the central object store.
17. The computer-program product of claim 13 , wherein the encrypting comprises utilizing a security key that is common across the set of application servers.