Questions

What should I check before a big traffic event?

Before an expected traffic peak, the question is how much of that traffic will reach your origin server. A page served from a CDN cache costs the origin nothing; a page that bypasses the cache costs it a full render per visitor. So the checks that matter most are caching — what is cacheable, whether the CDN is really serving from cache, and which requests always miss — followed by page weight and third-party dependencies you cannot scale yourself.

Is the traffic going to be served from cache?

Read the caching headers on the pages that will receive the traffic, not only the home page. A landing page marked private or no-store is rendered by the origin for every visitor.

Read the CDN's own cache status header on repeated requests. A CDN in front of a site is not the same as a CDN serving it, and a page that misses every time is common.

Check static assets carry long lifetimes with versioned file names, which is what lets them be cached essentially for free.

Look for a cookie being set on every response, which many caches treat as a reason not to store the response at all.

A header that varies the response on something highly variable fragments the cache into near-uselessness.

What always reaches the origin

Personalised pages: account areas, carts, anything reading a session. These are uncacheable by design and are the capacity you actually have to plan.

Search and filter pages, whose parameter combinations make each request effectively unique.

API calls the pages make after load, which frequently carry no caching policy at all.

Form submissions, which by nature cannot be cached.

Knowing this list is what turns the vague question of whether the site will cope into a specific one about a few endpoints.

How heavy is each visit?

Page weight and request count multiply by the number of visitors, which matters for bandwidth costs even when everything is cached.

Uncompressed text resources are the cheapest waste to remove before a peak.

Oversized images are usually the largest share of the weight and the easiest to reduce.

A slow server response under normal load will be slower under peak load — measure it now, when there is time to act.

Resources that fail to load are wasted requests that also degrade the page.

What you depend on and cannot scale

Third-party scripts on the critical path: if their provider slows under the same event, your page waits for them.

Embedded widgets — chat, reviews, maps — each an external service with its own limits.

Payment and authentication providers, which are the dependencies whose failure costs most during a sale.

Rate limits on APIs you call, which a traffic peak can reach even when your own servers are fine.

Load critical third parties asynchronously where you can, so their slowness does not become your outage.

How you will know it is going wrong

An external uptime check on the pages that matter, from outside your own network.

A status page hosted somewhere other than the infrastructure it reports on, so it survives the incident it describes.

A health endpoint the load balancer and the monitoring can read.

A maintenance or overload page that returns the right status code, so crawlers do not index the error page during the event.

And somebody watching, which no configuration replaces.

What this does not replace

A load test. An external check reads configuration; it does not generate the peak, and only generating it proves capacity.

Capacity planning for the uncacheable endpoints, which depends on your application and your database.

A rollback plan, since a peak is the worst moment to discover a deployment cannot be reverted quickly.

Agreement with your providers about limits, which lives in contracts and dashboards rather than in headers.

Frequently asked questions

My site is behind a CDN. Am I covered?
Only for what the CDN actually caches. Read its cache status header on repeated requests to the pages that will receive traffic: a miss every time means every visitor reaches the origin.
Why does a cookie matter for caching?
Many caches will not store a response that sets a cookie, because it may be specific to one visitor. A cookie set on every page quietly disables caching for all of them.
Is this a substitute for load testing?
No. It tells you how much traffic is likely to reach the origin. Only a load test tells you how much the origin can take.

Sources

Related

VeriFixScan crawls a site and applies its checks to every page it reaches, keeping the evidence behind each finding. Scanning one website is free.

Scan a website