Fav Icon Incoming bandwitdh

[stehan-lottostarco]

Hi

I’m running a Next.js project on Vercel, and I’ve noticed something strange in my bandwidth analytics.

Specifically, my fav icons:

This feels disproportionate — especially the incoming traffic, how is the fav icon treated as incoming traffic and not outgoing?

Any suggestions or input would be greatly appreciated

In my _document.js, I’ve linked favicons like so:

<link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" />
<link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" />
<link rel="shortcut icon" href="/static/favicon.png" />
<link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png" />
<link rel="manifest" href="/site.webmanifest" />
<link rel="mask-icon" href="/safari-pinned-tab.svg" color="#000000" />

[bestcodes]

Is it normal for your website to get this much traffic? My first thought would be that someone is trying to DDoS you (or Vercel) by exploiting the favicon (sending large headers or TLS attacks).

My next thought would be caching. Are the favicons in a /public folder? I think Vercel caches /public assets automatically, otherwise you will have to set custom cache control headers.

[pawlean (Pauline P. Narvas)]

+1 on BestCodes’ comment!

Also sharing our Firewall docs, in case it’s helpful.

Vercel Firewall

[stehan-lottostarco]

Hi, yea, we do get a few ddos attacks time to time based on the vercel firewall observability, but I assume those that are shown on vercel are actually getting blocked?

We also have a large user base with constant interactions on a site that consists of basically just images. This is just 3 days of bandwidth and traffic we sitting around 10tb bandwidth each month, that I am trying to get down to 8.

Yes the fav icons are in the /public.

I think I will just move them to an alternative storage/cdn like bunny.net.