Random looping

[Jim Fox]

We've had a couple of similar issues.
1) The F5 allows either IP address or cookie session persistance.  Neither 
works for all clients all the time.  However, you can configure them both 
and that seems to work for everyone.
2) We often see some clients looping - I expect some odd kind of prefetch, 
but I don't know for sure and don't care that much.  The F5 allows you to 
script 
various DoS remedies.  Something like 20 hits from the same IP in 20 
seconds and that IP gets blocked for a few minutes. I don't remember 
exactly what our settings are, but that approach works for us.

Jim

On Mon, 17 Aug 2020, Chad Phillips wrote:

> Date: Mon, 17 Aug 2020 06:20:22
> From: Chad Phillips <tempalte at gmail.com>
> To: users at shibboleth.net
> Reply-To: Shib Users <users at shibboleth.net>
> Subject: Random looping
> 
> Hi,
> My organization just launched a new website using Shibboleth.  In testing everything seemed to work fine.
> 
> Now that we are running under a load, we are getting random looping issues.  We can't identify a pattern yet.  I can go through
> access protected pages, then at some point it will get into a loop between the SP and IDP.
> 
> We are using Shibboleth as the SP on Apache.  Salesforce is our IDP.  We run the Apache behind and F5 load balancer.  We have
> sticky sessions on, so the user is kept with the same Apache/Shibboleth server.
> 
> It is seems random when it happens.  Any ideas on what this might be?
> 
> thank you
> chad
> 
>