A critical vulnerability was discovered in React Server Components (Next.js). Our systems remain protected but we advise to update packages to newest version. Learn More

Magnus Rahl
Apr 30, 2018
  4375
(7 votes)

ASP.NET Cache memory bug fixes released

Fixes for two bugs I found in ASP.NET Cache memory management are included in .NET Framework 4.7.2 which was released today (download here). The two bugs would under most conditions allow the ASP.NET Runtime Cache, used heavily in Episerver applications, to use up almost all memory. In Azure Web Apps (and therefore in DXC Service) this would in turn cause unnecessary application recycles because of how the Proactive Auto Heal feature (enabled by default) reacts to high memory usage. You can read more in my previous blog post.

While you can download and install the update today on servers you control yourself, it will be some more time before the update is desployed where it is needed the most, on Azure Web Apps. There is no definitive time table for this, but there is a github announcement and discussion. A possible estimate might be drawn from the previous deployment: .NET Framework 4.7.1 was released 2017-10-17 (source), Azure deployments started around 2017-12-04 (source) and were complete by 2018-01-05 (source).

In the meantime I strongly advice sites to continue to use the workaround (explained in my previous blog post) of setting the cache's privateBytesPollTime setting to 29 seconds and explicitly configure a percentagePhysicalMemoryUsedLimit, 90 % or below to stay clear of Proactive Auto Heal, e.g.

<cache percentagePhysicalMemoryUsedLimit="80" privateBytesPollTime="00:00:29" />

Update 2018-05-01

If possible, also consider updating to CMS 11.1 or later. From that verison, a much shorter cache timeout is used for items inserted through scheduled jobs. There is also a new API making it possible to control the Content cache timeout for a specific call, e.g. when doing a batch read of large amounts of content that you don't expect to be accessed very often.

For any CMS version, you can also consider configuring the pageCacheSlidingExpiration option of the episerver config section. The default for this option is 12 hours, which considering it is a sliding expiration, is probably overkill for most applications.

Apr 30, 2018

Comments

Aria Zanganeh
Aria Zanganeh May 1, 2018 12:15 AM

This is really awesome. We were waiting for this :) 

Magnus Rahl
Magnus Rahl Aug 9, 2018 08:09 AM

.NET Framework 4.7.2 is now scheduled to roll out on Azure Web Apps during September: https://azure.microsoft.com/en-us/updates/net-framework-4-7-2-update-coming-to-azure-app-service-apps/

Please login to comment.
Latest blogs
A day in the life of an Optimizely OMVP - Optimizely Opal: Specialized Agents, Workflows, and Tools Explained

The AI landscape in digital experience platforms has shifted dramatically. At Opticon 2025, Optimizely unveiled the next evolution of Optimizely Op...

Graham Carr | Dec 16, 2025

Optimizely CMS - Learning by Doing: EP09 - Create Hero, Breadcrumb's and Integrate SEO : Demo

  Episode 9  is Live!! The latest installment of my  Learning by Doing: Build Series  on  Optimizely Episode 9 CMS 12  is now available on YouTube!...

Ratish | Dec 15, 2025 |

Building simple Opal tools for product search and content creation

Optimizely Opal tools make it easy for AI agents to call your APIs – in this post we’ll build a small ASP.NET host that exposes two of them: one fo...

Pär Wissmark | Dec 13, 2025 |

CMS Audiences - check all usage

Sometimes you want to check if an Audience from your CMS (former Visitor Group) has been used by which page(and which version of that page) Then yo...

Tuan Anh Hoang | Dec 12, 2025