Cache Key Mismatch Observation in Reverse Proxy Rules

CATEGORY: NOTES DATE: 2026-02-24

Research by badjuju - Red Orca

Quick note documenting a cache poisoning condition caused by query normalization mismatch between CDN and origin cache layers.

Summary

Observed a split behavior where the CDN normalized query parameters before caching, while the origin cache treated parameter ordering as unique.

Observation

Requests with reordered query parameters could populate a shared CDN key while mapping to distinct origin responses.

/api/profile?user=42&view=full
/api/profile?view=full&user=42

Worth testing for response confusion and cache poisoning in authenticated edge cases.