[squid-dev] I was wondering about session\connection ID.

[Amos Jeffries]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 29/12/2014 10:03 a.m., Eliezer Croitoru wrote:
> I noticed that some products do use a session ID and I am not sure 
> about the plans inside squid. Until now I noticed the session ID in
> reverse proxies error pages and on some logging output.

What "session ID"? There is no such thing as sessions in HTTP.

> 
> If there are any plans to implement a session\connection ID one 
> question rises: Are we going to use a connection ID? or a session
> ID? request ID? others? What scheme will be used for the ID?

Connection ID is not an option, with middleware there are already 2
HTTP connections, maybe more involved with any given message.

The rest of these answers are being debated in IETF by people which
want to make HTTP stateful and revert Internet into a telephone style
trunk-switching network model. The proponents seem to be either the
teleco people who it seems cant/wont pick up the ideas of
packet-switching model, or the surveillance people who want to link
sessions to peoples national ID numbers and track their movements.

> What is the maximum concurrent connections we expect a proxy to be 
> able to handle?

millions. The load balancer guys in IETF are already complaining that
a 32-bit int is barely enought to count things for long periods of
time (rolls over within hours already).

> 
> Most of the above decisions would probably also need to take in 
> account HTTP/2.0.

HTTP/2.0 is orthogonal to traditional the session idea. Both a single
message and a connection are "sessions" with many sub-pieces. Neither
one of them cleanly applies to the stateful sequence of application
messages people describe as a "browsing session" and send around in
Cookie headers these days.


Amos
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)

iQEcBAEBAgAGBQJUoIIYAAoJELJo5wb/XPRj/L8H/1J7DZRX7k9DQ0Vkvdtaeyke
tptueQUG0dC+eleLji+fjb5qq8qGAyewhuda5TCuT2/Ak/AUt3lYiJhZWt5SaoSp
xGcUgSgXwRbzSAeEBNB5sYOO+MQ6GPYJD21bELGrQU82l70SZ0Tk83G6lUJBFlOO
7V7oujRv10X3J1a39qekJ1Me7R1YMI0kP1Hu8i67uSBQemjokcJTbHO5mdvtBIqe
XYLWJoxk4e7RMozdgLCb6o3Kf7VGNPbODPmCh6IGNFPJLwQf5TJYFXbp1MiYP3KZ
4NQYfb6+8nJJZ3eil/WaGOHbwvEgk1u4vTsDf/dSIZFCdTrnsHmWQPl5qW0jRqE=
=QPfO
-----END PGP SIGNATURE-----