AWSALB and AWSALBCORS are 3rd party cookies in web

0

Our services are called from the websites of our customers.

We use ALB to balance and forward requests to the final targets.

Some of our services require session stickiness. AWSALB* cookies are created in our own domain, so they are considered 3rd party cookies (which they are, in fact). However, this is huge a problem, since we cannot serve clients with 3rd party cookies blocked in their browsers.

How can we handle this?

Is there a way to keep session stickiness without those cookies?

Thanks in advance.

cburaca
質問済み 2年前6972ビュー
1回答
1
承認された回答

As you know, ALB supports stickiness with cookie and the cookie could be either ALB generated or Web App generated. If it's not possible to use non of these cookie in your environment, you can think of using NLB instead of ALB. NLB is not for application load balancer and is working at layer 4. But NLB can distribute HTTP traffic and you can use stickiness with source ip address. The other thing you should consider is that Health Check of NLB is not application layer but tcp layer so NLB can't check the health of target group at application layer. If you're OK with source IP stickiness and health check method of NLB is OK to use, you can try to use NLB.

profile pictureAWS
回答済み 2年前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ