Using Drupal 8/9 cache-tags to DDoS a high-traffic site with high editorial activity

  1. Put the View on the homepage.

Done.

As nodes are edited, the “node_list” cache tag will continuously clear (and that tag is on every single page with a View). This means whatever tag-based mechanism you’re using for caching (Varnish) will continuously request new versions of the website as requests come in.

Acquia is aware of this, Drupal community is aware of this, and there have been numerous issues in the queue about it. Consistently a “will not fix.”

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Steven Linn

Steven Linn

Drupal engineer since 2012, D7-9