3

My website installed in the Microsoft's Azure portal. My website using asp.net and framework(sitecore cms). It's C#.

I checked my website using gtmetrix. It recommends using cookie-free domains.

I want to try it, But I'm confused as to how to set that up under Azure portal. I'm afraid that will bring down the server. How do I do this?

Success Man
  • 345
  • 4
  • 10

2 Answers2

1

I do not know Azure or Sitecore, however, I did do some poking around and this is what I found.

While it appears that some sitecore cookies can be disabled such as analytics, I see no reference to disabling the cookies for login and other management aspects of the CMS.

As far as Azure is concerned, the only reference to what you are asking is for static sites.

And while I am not entirely sure what you are trying to achieve as far as your website is concerned, this is not clear, it appears that the use of Sitecore will require cookies.

On Use cookie-free domains, it appears the recommendation for cookie free domains is for statics sites.

You may not be able to have a cookie free domain using Sitecore.

closetnoc
  • 32,902
  • 4
  • 46
  • 69
1

Using cookie free domains has very little to do with the web server that you are using. It is a technique for not sending cookie data when fetching static assets such as images, JavaScript, and CSS. Those assets don't typically need that data and it can make the requests slower to send lots of data to them in the cookies.

The technique only makes sense if:

  1. You use www.example.com for your site as opposed to example.com. It won't work if you use the bare domain name. When you set cookies at the bare domain, they are available to all subdomains, so it isn't possible to use a cookie free subdomain.
  2. You have lots of data in cookies. Sending 1k to 4k of cookie data to every single static asset request can add up. If you just have a 50 bytes to identify the logged in user as your cookie, this technique won't help performance much.

To use this technique you:

  1. Make sure to set cookies for www.example.com instead of example.com. This needs to be configured for both server side cookies set in your ASP code and any cookies set in your JavaScript client side code.
  2. Serve your images, CSS, and JS from a subdomain like assets.example.com, static.example.com, img.example.com, js.example.com, or css.example.com.

To do this:

  1. You need to create a subdomain and point it at your server.
  2. You need to configure the server to serve your assets at this domain.
  3. You need to change all your calls to images, css, and javascript in your HTML to use a full URL of the subdomain.
  4. You need to ensure cookies are created just for www..
  5. You may need to delete any old cookies that are not set at www.

There isn't much here that is specific to IIS and ASP. To set the cookie domain from ASP code, use this StackOverflow example: Set Domain on ASP Session Cookie. For JavaScript, use this: Creating a JavaScript cookie on a domain and reading it across sub domains. For setting up subdomains under IIS, see How to set up subdomains on IIS 7.

Stephen Ostermiller
  • 99,822
  • 18
  • 143
  • 364