HTTPSession session state management

[Ed Pinto]

Hi all,
Please forgive me if this is a newbie type question. I'm just examining
javax.servlet.http. I'm trying to figure out the scalability of some web
servers. I have two questions:
1) Is it webservers that are responsible for implementing HTTPSession?

2) How is session state typically managed in a server like Tomcat? Cookies?
Hidden Fields? In memory (sticky sessions)? Database?

Thanks,
Ed

[hualu]

Ed,
1). yes, it is the responsibility of the web application server's (such as
IBM's Websphere) responsibility to implement HTTPSession.
2). In Websphere application server (or maybe others, according to J2ee specification?),
the session data is stored in database such as DB2. Through websphere administration,
there are two alternative choices to handle the session ID: either the ID
can be stored as Cookie in the users's machine (the preferred way), or the
ID can be passed around as parameter string.
Hopefully that will answer your question.

Hua LU



"Ed Pinto" <epinto@wawanesa.com> wrote:
>
>Hi all,
>Please forgive me if this is a newbie type question. I'm just examining
>javax.servlet.http. I'm trying to figure out the scalability of some web
>servers. I have two questions:
>1) Is it webservers that are responsible for implementing HTTPSession?
>
>2) How is session state typically managed in a server like Tomcat? Cookies?
> Hidden Fields? In memory (sticky sessions)? Database?
>
>Thanks,
>Ed