CODEWITHSUNDEEP
cookiesencryptionasp.net-mvc-4forms-authenticationload-balancing
amateur
amateur

Reputation: 44663

forms authentication in a load balanced environment

I am currently working with integrating forms authentication in mvc4 application. Once a user is authenticated, an encrypted cookie is written to their PC.

My application will be installed on a load balanced environment where a user can hit any of the balanced web servers.

Question I have around encryption of cookies, will there be any issue if the cookie is encrypted on server A, and the next request the user makes is to server B and the cookie needs to be decrypted to proceed? Any problem regarding encrypting on one server and decrypting on the other?

Upvotes: 1

Views: 2227

Answers (2)

Julian
Julian

Reputation: 363

No problem at all. Just be sure that the cookies are for the whole domain (mysite.com.) to prevent problems if you have a structure like server1.mysite.com. After that, for sure, keeping in mind that keys are available to each server, you should have no problem.

Upvotes: 0

muratgu
muratgu

Reputation: 7311

You need to make sure machine keys are same across all servers. Follow this link for IIS7.

Upvotes: 2

Related Questions