I have a CSS with a SSL module performing GSLB and load balancing b/w backend web servers. From a DNS perspective, the IP address of the primary site is always given out unless the primary site is down. I am having problems with users being asked to reauthenticate to a server during an active session to one of the servers. I have pasted the relevant parts of the configuration below. I didn't think I needed sticky dns because it should always be handing out the same ip (primary site VIP) - unless that site is down.
global-portmap base-port 3000 range 30000
app-udp
dns-server zone 0 tier1 "test.test" preferlocal 10
dns-server
dns-record a host.test.test x.x.x.x 1 single kal-ap 192.168.12.10 254 sticky-disabled preferlocal
dns-record a www.host.test.test x.x.x.x 1 single kal-ap 192.168.12.10 254 sticky-disabled preferlocal
app
content test.test
add service Test11
add service Test2
vip address 192.168.12.12
advanced-balance arrowpoint-cookie
redundant-index 6
protocol tcp
port 81
add dns host.test.test
add dns www.host.test.test
active
