Load Balancer sending 302 not 307! ViewState is missing?
Published by volkanuzun at 9:39 PM under Network and Software
Issues | ASP.NET | Security     Recently one of customers
reported a bug with our product. They told us that our software
does not work when there is a load balancer. First let me
explain their environment to give a better understanding we had
an issue.  At their environment there is a load balancer that is
holding the SSL certificates, anything behind the load balancer
is not SSL enabled. When a client connects to a server behind
the load balancer using https, load balancer strips out the
https section of the package, and send it to one of servers in
http protocol (not https).  Furthermore the company network
policy says that you can not talk to any servers without using
https. So basically even if “Server A” behind the load balancer
tries to talk to “Server B” behind the load balancer, it has to
be https (and of course load balancer will strip out the
certificate from the communication). T