Sessions are handled by the Symfony2 framework, specifically API and underlying session handlers provided by HTTP Fundation component, this is further enhanced in eZ Publish with support for SiteAccess aware session cookie configuration.
Use of Memcached (or experimentally using PDO) as session handler is a requirement in Cluster setup, for details see below, for an overview of clustering feature see Clustering.
In Symfony, session handler is configured using
framework.session.handler_id. Symfony can be configured to use custom handlers, or just fallback to what is configured in PHP by setting it to null (
Prior to 5.4 / 2014.11
Before 5.4 eZ Publish uses default Framework Bundle configuration, which on Symfony 2.3 implies Symfony's NativeFileSessionHandler (
session.handler.native_file service). This handler forces PHP's builtin "files" session save handler, and specifically configures it to use
session.save_path set to
ezpublish/sessions by default
(ezpublish/cache/<env>/sessions before 5.3).
Session Garbage collection on Debian & Ubuntu
Debian based Linux distros disables session.gc_probability by default and uses cronjob instead to clear sessions files. As we use custom save_path for sessions here that would normally be a problem, however default Symfony configuration makes sure to re enable this in
framework.session.gc_probability so with default Symfony and PHP settings it should garbage collecting sessions files roughly every 100th time on average (1% probability by default).
As of 5.4 / 2014.11
Uses same default configuration as recent versions of Symfony standard distribution, this makes sure you can configure sessions purely in php by default, and allows Debian/Ubuntu session file cleanup cronjob to work as intended.
Recommendations for production setup
Single server setup
For single server, default handler should be preferred.
For Cluster setup we need to configure Sessions to use a backend that is shared between web servers, and supports locking. Only options out of the box supporting this in Symfony is native PHP memcached session save handler provided by php-memcached extension, and Symfony session handler for PDO (database).
Storing sessions in Memcached using php-memcached
For setting up eZ Publish using this memcached you'll need to configure the session save handler settings in php.ini as documented here, optionally tweak php-memcached session settings, and use default configuration as of eZ Publish 5.4 / 2014.11 documented above.
Alternative storing sessions in database using PDO
While not currently our recommendation from performance perspective, for setups where Database is preferred for storing Sessions, you may use Symfony's PdoSessionHandler.
Below is an configuration example for eZ Publish, but please refer to documented in Symfony Cookbook documentation for full documentation.
Further Symfony references
- Cookbook Session recipes (symfony.com)
- HTTP Fundation Component documentation (symfony.com)
- Source code of NativeFileSessionHandler (github.com),
- Cookbook Configuration recipe for setting-up PdoSessionHandler (symfony.com), aka