Apache Geode

HTTP Session Management Modules

The Apache Geode HTTP Session Management modules provide fast, scalable, and reliable session replication for HTTP servers without requiring application changes.

Apache Geode offers HTTP session management modules for Tomcat and AppServers.

Note: As of version 2.x, Geode only supports Tomcat 10.1 and later versions (Jakarta EE namespace). Support for Tomcat 7, 8, 9, and Pivotal tc Server has been discontinued.

These modules are included with the Apache Geode product distribution, and installation .zip files can be found in the tools/Modules directory of your product installation.

• HTTP Session Management Quick Start

  In this section you download, install, and set up the HTTP Session Management modules.

• Advantages of Using Geode for Session Management

  The HTTP Session Management Module enables you to customize how you manage your session data.

• Common Topologies for HTTP Session Management

  Decide which topology is best for your usage. The module configuration process is slightly different for each topology.

• General Information on HTTP Session Management

  This section provides information on sticky load balancers, session expiration, additional Geode property changes, serialization and more.

• Session State Log Files

  Several log files are written by the various parts of the session management code.

• Configuring Non-Sticky Sessions

  This section describes the configuration of non-sticky sessions.

• Securing HTTP Session Deserialization

  Configure ObjectInputFilter (JEP 290) to protect against deserialization vulnerabilities and secure your session data.

• HTTP Session Management Module for Tomcat

  You set up and use the module by modifying Tomcat’s server.xml and context.xml files. Supports Tomcat 10.1 and later (Jakarta EE).

• HTTP Session Management Module for AppServers

  You implement session caching with the HTTP Session Management Module for AppServers with a special filter, defined in the web.xml, which is configured to intercept and wrap all requests.