With the new implementation of http session replication using JBossCache, the session.invalidate was implemented to be expired only locally. It never gets replicated.

This was discovered during a load test by Clebert where a new session keeps created all the time and then invlidated. So if the invlidation is done only locally, the backup node will run out of memeory soon.