Session Lab
Apache / Session Test Environment

Testing mod_but

Apache Session Security Module

Explore authentication, shared-memory sessions, and backend cookie isolation. Follow a request through mod_but and see what reaches your application.

Goto Protected Area
01 / CLIENTBrowserMaster session cookie
→
02 / GATEWAYmod_butAuthentication + SHM cookie bag
→
03 / APPLICATIONBackend ApacheStored cookies injected here

mod_but Architecture

Internet client connects through a firewall to mod_but, which proxies requests to a login application and backend application. Separate arrows show the mod_but and backend sessions.
Browser and backend session boundaries. Click the diagram to view it full size. LDAP and Tomcat illustrate an example deployment.