envoyproxy/envoy
Stateful Session cookies incompatible between Envoy Processes.
Chiusa
#44.111 aperta il 25 mar 2026
bughelp wanted
Metriche repository
- Star
- (27.997 stelle)
- Metriche merge PR
- (Merge medio 8g) (378 PR mergiate in 30 g)
Descrizione
Title: Stateful Session cookies incompatible between Envoy Processes.
Description: When using Envoy as an Edge Proxy with multiple instances (an NLB in front) AND using the StatefulSession with cookies doesn't work properly.
The cookie is encoded with the expiry time BUT it uses the monotonic clock:
When HTTP requests are routed to different Envoy processes, they will have different values for their monotonic clock and the cookie can inadvertently expire sooner then its should, which will cause a new backend to get selected.
I believe the appropriate fix is for time_source_.systemTime() to be used so that two envoy processes can validate each other cookies.
cc @cpakulski