<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We have a .NET web application (WS2012, .NET 4.0, Shibboleth SP 2.5.5 for Windows) that works perfectly when users access the site directly, but when we put Akamai edge caching in front of it, the page returns a few elements then all subsequent
resources on the page return 302s. If the user refreshes the page it retrieves a few more elements before returning 302s, and so on. After about 10-15 refreshes, the page is complete with no 302s.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The site is hosted at AWS, the domain name points to Akamai and Akamai proxies requests to the site, which is fronted with an Elastic Load Balancer (ELB), which Akamai references by its name:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Client <span style="font-family:Wingdings">à</span> Akamai <span style="font-family:Wingdings">
à</span> ELB <span style="font-family:Wingdings">à</span> App Server<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Akamai frequently presents different IP addresses to the back end, so we’ve disabled any address checking in our Sessions element, shown here:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><Sessions timeout="1800" lifetime="28800" relayState="ss:mem" checkAddress="false" consistentAddress="false" handlerSSL="true" cookieProps="https"><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Has anyone else experienced this, and do you have any ideas as to why Akamai could be causing this behavior? We’ve used Akamai to edge cache for thousands of sites without issue, and this behavior is definitely some kind of strange interplay
between Akamai and Shibboleth.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks in advance for any help or guidance you can offer.<o:p></o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="margin-left:5.4pt;border-collapse:collapse">
<tbody>
<tr>
<td width="163" valign="top" style="width:1.7in;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
</td>
<td width="216" valign="top" style="width:2.25in;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
</td>
</tr>
<tr>
<td width="163" valign="top" style="width:1.7in;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal"><span style="color:#1F497D"><img width="146" height="159" id="Picture_x0020_1" src="cid:image001.png@01D24EFB.6A8B0820" alt="cid:image001.png@01D01537.F005A230"><o:p></o:p></span></p>
</td>
<td width="216" valign="top" style="width:2.25in;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal"><span style="color:#1F497D"><br>
</span><b><span style="font-size:12.0pt;color:#1F497D">James W. Anderson<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="color:#1F497D">Cloud Infrastructure Architect<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">The Coca-Cola Company<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">404.676.4914 Office<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">770.653.1033 Mobile<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">404.598.4914 Fax<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><a href="mailto:jamesanderson@coca-cola.com"><span style="color:blue">jamesanderson@coca-cola.com</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<hr>
<font face="Arial" color="Gray" size="1"><br>
CONFIDENTIALITY NOTICE<br>
NOTICE: This message is intended for the use of the individual or entity to which it is addressed and may contain information that is confidential, privileged and exempt from disclosure under applicable law. If the reader of this message is not the intended
recipient, you are hereby notified that any printing, copying, dissemination, distribution, disclosure or forwarding of this communication is strictly prohibited. If you have received this communication in error, please contact the sender immediately and delete
it from your system. Thank You.<br>
</font><br>
<hr>
<font face="Arial" color="Black" size="2"><br>
</font>
</body>
</html>