We have a fairly large web solution that runs on .Net 4.5. Recently, when we were considering a performance problem, when the system seemed to be serving only one request at any given time (per client), we learned that the reason for this was the session state. By changing the EnableSessionState attribute to ReadOnly, you can serve multiple requests at the same time, and performance has improved significantly.
We thought that we might face all the problems, since we rely on the state of the session for a number of things in our system, but so far we really have not had any negative side effects. Logins work as expected, and all the things that we keep in session state also work fine.
This begs the question ... why is this not the default behavior? Are there any obvious bad side effects that we have not experienced yet?
source share