I'm calling an Azure app service app and found these two cookies:
I understand the ARRAffinity
cookie is to make sure the request is always sent back to the same backend instance, but what is the ARRAffinitySameSite
cookie for?
The purpose of ARRAffinitySameSite
and ARRAffinity
cookies is the same - they help to direct requests to the correct instance in load-balanced environments.
The only difference between them is the SameSite
attribute. ARRAffinitySameSite
was introduced when Chromium-based browsers enforced the new SameSite policy in 2020.
However, some old browsers do not support the SameSite
attribute and Azure keeps the cookie ARRAffinity
for backward compatibility.