On Sep 23, 2005, at 2:51 PM, Daniel P. Stasinski wrote:
On Fri, 2005-09-23 at 14:05 -0400, Nathan Folkman wrote:
The idea of a dedicated session server solves all the problems of
multiple servers, multiple instances and load balancing.
How is a session defined? Does it exist for the life of a browser
session, or is it more permanent, surviving browser restarts? Lots
of interesting ways you could go with this. :-)
A session is reduced to: Allocate me a chuck of virtual space.
Assign
that chuck of virtual space to a single identifier. Allow anyone to
read/write to it via it's identifier. Preserve it by any means
possible
until specifically told to destroy it or after a specified period of
inactivity. The common theme I am seeing of storing/retrieving
data in
that chuck of virtual space is using key/value pairs similar to ns_set
and nsv_.
So there are basically two types of data:
1. Volatile - this I would consider session based.
2. Persistent - this seems more like preferences or member data.
Also guessing users fall into one of the following classes:
1. New Anonymous - never signed in, not cookied
2. Returning Anonymous - cookied with some unique identifier
3. Signed in - authenticated via some sort of authentication system
The way the session identifier is assigned to a user will vary
based on
needs. Some will want to save it in persistent cookies, some in
session
cookies, some by IP address and some in query strings. That is not
the
job of the session manager and needs no consideration in its design.
Yes and no. One possible approach would be to create a UUID and
assign it via a persistent cookie. You could then look for this
cookie on subsequent requests. We have an API that creates a UUID
based on the combination of machine MAC address, current time,
processed ID, and thread ID.
Anyhow, just some more suggestions. ;-)
- n
Daniel
--
| ---------------------------------------------------------------
| Daniel P. Stasinski | http://www.disabilities-r-us.com/
| [EMAIL PROTECTED] | http://www.scriptkitties.com/
| --------------------------- | ---------------------------------
| Jabber: [EMAIL PROTECTED] | Google Talk: mooooooo
--
AOLserver - http://www.aolserver.com/
To Remove yourself from this list, simply send an email to
<[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the
Subject: field of your email blank.
--
AOLserver - http://www.aolserver.com/
To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]>
with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject:
field of your email blank.