Skip to main content
DevScreen
Inspiring
Dec 7, 2017 4:49 PM UTC
Answered

Client Variable Storage in Multi-Server Setup

Hi,

We have 4 ColdFusion Standard Edition servers.  I would like to set all of them to use database for Client Variable Storage - and use the same Datasource.

We use UUID for generating CFTOKEN.  Since I am using the same datasource, will it be possible that one server will create same CFID/CFTOKEN as another server?  Remember, that these are Standard Edition servers.  My main concern is that Server 1 creates a set of CFID/CFTOKEN.   Some days later, Server 2 creates the same set of tokens and ends up sharing another users data that had previously logged on to Server 1.

Thanks!

    This topic is closed to new replies. Start a new post to keep the conversation going.
    Dave WattsCorrect answer
    Community Expert
    Dec 7, 2017 5:02 PM UTC

    This should not be an issue, because UUIDs are supposed to be "universally unique" even across multiple machines. UUID generation algorithms should create UUIDs that are, according to the RFC, "unique across both space and time, with respect to the space of all UUIDs". The CFIDs may well overlap, but the CFTOKENs should not.

    http://www.ietf.org/rfc/rfc4122.txt

    Dave Watts, CTO, Fig Leaf Software

    Dave Watts, Eidolon LLC

    4 replies

    Dave WattsCommunity ExpertCorrect answer
    Community Expert
    Dec 7, 2017 5:02 PM UTC

    This should not be an issue, because UUIDs are supposed to be "universally unique" even across multiple machines. UUID generation algorithms should create UUIDs that are, according to the RFC, "unique across both space and time, with respect to the space of all UUIDs". The CFIDs may well overlap, but the CFTOKENs should not.

    http://www.ietf.org/rfc/rfc4122.txt

    Dave Watts, CTO, Fig Leaf Software

    Translate
    Dave Watts, Eidolon LLC
    DevScreen
    DevScreenAuthor
    Inspiring
    Dec 7, 2017 5:06 PM UTC

    Thanks for the info Dave!   Can overlapping CFIDs be a security issue?  I believe ColdFusion uses combination of CFID and CFTOKEN, but just want to be sure.

    Translate
    Community Expert
    Dec 7, 2017 5:15 PM UTC

    No, those shouldn't be an issue. They're too small to be used by themselves as a unique value.

    Dave Watts, CTO, Fig Leaf Software

    Translate
    Dave Watts, Eidolon LLC