[Original] The page does not respond when the cookie is too large

Problems:

Last month, some websites in charge of a friend failed to log on to the website after the domain name is changed (the domain name after the change is longer than before. He confirmed that before and after the domain name upgrade,ProgramAnd server configurations have not been changed. The environment is as follows: Windows Server 2003, IIS6, Asp.net 2.0

Symptoms:

1. When a user logs on, the server does not respond.

2. query the IIS diary and find that the log is normal in response to HTTP 200.

3. Capture packets through the server and client, and find that the server has not responded to the client

Solution Process:

Google and Baidu haven't found a solution to the problem. Through the above phenomenon, the httpanalyzer software is used on the client to capture packets for normal login users. It is found that after the user logs on, the server will write more than 10 cookies, including the user's encrypted personal data (such as the last logon time, logon IP address, and other personal configuration information), it is initially suspected that the problem occurs when IIS writes cookies, after the domain name is upgraded, the cookie size increases.

When querying rfc2965, we found that there is a cookie restriction in section 5.3: a total of 300 cookies, 20 cookies for each domain name, And 4096 bytes for each cookie (including name, value, and validity period. However, the size of the cookie written by the system is about 2900 bytes, which seems to be far away from the rules. If no other reason is found, you can only try to reduce the cookie, remove two useless cookies and try again.

Summary:

1. It seems that this problem will occur in a specific environment in IIS6, because at that time, more than 10 Web servers in the project had F5, but only two of them had this problem. To solve this problem, I also conducted a test under iis7 and found that when the cookie size reaches more than 30000 characters, there will be a 200 response packet, however, the response content is blank and "Internet Explorer cannot display the webpage" is displayed on IE. Therefore, the cookie size varies with IIS6 and iis7.

2. It is recommended that you do not write too much information such as user configuration into the cookie, so you do not know when IIS will go wrong.

 

The above are the problems encountered in the real project process and hope to help you. Thank you.

 

--------------------

Reprinted please indicate the source