Big IP cookie not getting invalidated in PRPC 7.2.2 when Passivating to database.
When configuring database passivation in PRPC 7.2.2 I am seeing that the user data gets passivated to the database but the BIG IP COOKIE is not getting invalidated by PRPC. Below is the configuration placed in the prconfig.xml file.
<env name="session/ha/Enabled" value="true"/>
<env name="initialization/persistrequestor/storage" value="database" />
<env name="session/ha/quiesce/strategy" value="slowDrain" />
<env name="session/ha/quiesce/customSessionInvalidationMethod" value="configurable-cookie-invalidator"/>
<env name="session/ha/quiesce/cookieToInvalidate" value="BIGipServergdmuat-443"/>
If anyone has had this issue before and have a solution please advise.
Thanks
***Updated by moderator: Lochan to add Categories***
Accepted Solution
American Express
US
Issue resolved: With previous version of PRPC before you passivate users across nodes we would follow the below steps.
- Log into the F5 (LTM) and Disable the node to prevent new traffic from connecting to that node.
- Quiesce the users from that node to another.
New Steps:
With the 7.2.2 and later PEGA has move to immediate drain instead of slow drain and has changed the process a bit differently.
- Initiate Quiescing of the users first.
- Log into the F5 (LTM) and Force Offline the node to prevent new traffic from connecting to that node.
- Then the users will get moved to the next set of servers in the cluster.
PEGA should be working on updating their documentation to reflect this new process. Also please find reference from F5 on the matter.
https://support.f5.com/csp/article/K13310
JPMorgan Chase & Company
US
Hi,
The theory behind the "cookieToInvalidate” setting is that some load balancers use a cookie to keep you sticky. So the value that you give to this setting should be the cookie that your load balancer uses to keep your session sticky.
The named cookie will never be created or set by the PRPC engine - it is something that the load balancer should put on the request. Then in order to move that requestor to another node, we need to clear that cookie so the load balancer sees the session as new incoming request.
Sberbank
RU
Hi,
I am working on the similar scenario in Pega 7.4. And if the named cookie is never set by PRPC engine, i.e. it does not invalidate it, why does PRPC need to know its name? Why should it be in settings at all?
Accepted Solution
American Express
US
Issue resolved: With previous version of PRPC before you passivate users across nodes we would follow the below steps.
- Log into the F5 (LTM) and Disable the node to prevent new traffic from connecting to that node.
- Quiesce the users from that node to another.
New Steps:
With the 7.2.2 and later PEGA has move to immediate drain instead of slow drain and has changed the process a bit differently.
- Initiate Quiescing of the users first.
- Log into the F5 (LTM) and Force Offline the node to prevent new traffic from connecting to that node.
- Then the users will get moved to the next set of servers in the cluster.
PEGA should be working on updating their documentation to reflect this new process. Also please find reference from F5 on the matter.
https://support.f5.com/csp/article/K13310
Pegasystems Inc.
IN
Thank you for reporting this documentation BUG. I have reported this to our internal doc team for further investogation and action!
Regards,
American Express
US
So the configuration in the DSS or in prconfig should look like the following.
<env name="session/ha/Enabled" value="true"/>
<!-- The below line is no longer needed as the default is database
<env name="initialization/persistrequestor/storage" value="database" />
-->
<!-- The statement below is not required. Also PEGA is moving away from slowDrain and using immediate drain which is default setting
<env name="session/ha/quiesce/strategy" value="slowDrain" />
-->
<env name="session/ha/quiesce/customSessionInvalidationMethod" value="configurable-cookie-invalidator"/>
<env name="session/ha/quiesce/cookieToInvalidate" value="BIGipServergdmuat-443"/>
Hope this helps everyone.