Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unbounded cache enabled in production #376

Open
Pythe1337N opened this issue Nov 22, 2023 · 0 comments
Open

Unbounded cache enabled in production #376

Pythe1337N opened this issue Nov 22, 2023 · 0 comments
Labels

Comments

@Pythe1337N
Copy link

🐞 Describe the bug

Apollo server seems to be using an unbounded cache with no way of configuring to be bounded.

Getting the following warning when starting production:

Persisted queries are enabled and are using an unbounded cache. Your server is vulnerable to denial of service attacks via memory exhaustion. Set cache: "bounded" or persistedQueries: false in your ApolloServer constructor, or see https://go.apollo.dev/s/cache-backends for other alternatives.

📚 To Reproduce

Start Ackee with NODE_ENV=production should be enough.
Configuration mentioned in the systemd docs also produces this warning.

💡 Expected behavior

To not be vulnerable to denial of service attacks by default.

⚙️ Environment

  • Installation: Manually / Standalone
  • Ackee version: v3.4.2
@Pythe1337N Pythe1337N added the bug label Nov 22, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant