As someone that ran a company for a number of years that sold solutions for session storage, the best solution is not to store them... Encode your state in coo

As someone that ran a company for a number of years that sold solutions for session storage, the best solution is not to store them... Encode your state in cookies instead. Of course, that's much easier said then done, especially given the size limits, but if you can, then it's an awesome approach. A good way to make this work is to identify what in your session is a cache of other data (e.g. your user record) and what is actually true session data (e.g. the user id). You only need store the former, the latter can be cached in memcached. Cookies are sent on every request, so you probably need to use an asset domain for best performance. Don't forget to make sure that your cookies are secure. That's been pretty well covered recently, but I think it involves typing A-E-S or something like that :-)