HA: Server affinity should not be required on load balancer

[PaulStovell]

When a HA instance is configured, and a user signs in, we issue them a cookie. However the next request may go to another server, which will not recognise the cookie (because of how cookie encryption works) and so the cookie will be rejected.

A temporary workaround is to enable client affinity in the load balancer so that the user always gets the same server (as much as is possible).

We should be able to either issue a cookie and have it work on both servers (using the master key as the basis for any encryption), or find some other way to share it.

[octoreleasebot]

Release Note: Server affinity is no longer required for High Availability servers behind a load balancer

[lock]

This thread has been automatically locked since there has not been any recent activity after it was closed. If you think you've found a related issue, please contact our support team so we can triage your issue, and make sure it's handled appropriately.