envoyproxy/envoy
Stateful Session cookies incompatible between Envoy Processes.
已关闭
#44,111 创建于 2026年3月25日
bughelp wanted
仓库指标
- 星标
- (27,997 个星标)
- PR 合并指标
- (平均合并 8天) (30 天内合并 378 个 PR)
描述
Title: Stateful Session cookies incompatible between Envoy Processes.
Description: When using Envoy as an Edge Proxy with multiple instances (an NLB in front) AND using the StatefulSession with cookies doesn't work properly.
The cookie is encoded with the expiry time BUT it uses the monotonic clock:
When HTTP requests are routed to different Envoy processes, they will have different values for their monotonic clock and the cookie can inadvertently expire sooner then its should, which will cause a new backend to get selected.
I believe the appropriate fix is for time_source_.systemTime() to be used so that two envoy processes can validate each other cookies.
cc @cpakulski