Blocking / Anonymizing Page icon requests?

So, most browsers that request these files [1] don't bother to include
cookies in their 'side' requests for them.

That can play absolute havoc with EZproxy, especially with
AutoLoginIP, as it will just 302 the first request for each file,
grant a new session, 302 back to original request, and then produce a
200 for the file (if found).

While most browsers are rather good about caching the responses per
hostname, services that use multiple hostnames for load balancing
and/or CDNs will trigger the requests with each new hostname. Some
browsers will also retry requests for the same hostname if previous
requests don't return a 200 response.

For an active browsing session, that can result in hundreds of
sessions being activated in a very short time. While those sessions
are usually dropped quickly as "Login never completed," they still
ratchet up the "Peak sessions active."

We really need a version of NeverProxy that will bypass filename
patterns instead of just hostnames or a version of AnonymousURL that
can be set globally and not overwritten by the scattered "AnonymousURL
-*" entries in the config files.

We could always just add AnonymousURL directives for the files to
every stanza (or separately group the stanzas that need their own
AnonymousURL directives, so we could just apply these once at the
start of all the other stanzas), but geez...

Have others noticed this issue or have thoughts on how best to 'fix' it?

HTH,
David


[1] Common:
android-icon-192x192.png
apple-icon-57x57.png
apple-icon-60x60.png
apple-icon-72x72.png
apple-icon-76x76.png
apple-icon-114x114.png
apple-icon-120x120.png
apple-icon-144x144.png
apple-icon-152x152.png
apple-icon-180x180.png
favicon-16x16.png
favicon-32x32.png
favicon-96x96.png
favicon.ico




David Jones
Library Systems Manager
University Library
Santa Clara University
500 El Camino Real
Santa Clara CA 95053-0500

mailto:[email protected]
phone: 408-551-7167
https://www.scu.edu/library/

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

********************************************************************
If you wish to stop receiving messages from EZPROXY-L or otherwise amend your preferences,
you can do so <a href="https://www.oclc.org/forms/internet-subscription.en.html">here</a>.
Or email [email protected] including the relevant text below in the body of the email:
• To unsubscribe: "unsubscribe EZPROXY-L"
• To receive EZPROXY-L in digest form: "set EZPROXY-L digest"
• To set your options to no mail: "set EZPROXY-L nomail"
• To receive these messages in the future "set EZPROXY-L mail"
To contact the list owners directly please send your message to [email protected].
If you unsubscribe from EZPROXY-L, you will no longer be able to participate in any of its features, including the public forum.
To unsubscribe from all OCLC marketing email communications
(including all OCLC listervs, OCLC Connect emails, OCLC event notifications, product/service/cooperative updates and newsletters),
please email us at [email protected].