← All insights
ENGINEERING JOURNAL / Google Cloud Operations

Cloud CDN Stale Content: Verify the Cache Key and Origin

Troubleshoot stale Cloud CDN releases using origin correctness, cache identity and targeted invalidation. Includes versioned asset planning and public-page acceptance tests.

CLOUVENIX / GCP OPERATIONSCLOUD CDN STALE CONTENT OPERATIONAL FLOWASSET VERSIONCHECK 1ORIGIN RESPONSECHECK 2CACHE IDENTITYCHECK 3CLIENT CHECKCHECK 4CONCEPTUAL FLOW / VERIFY THE ACTUAL RESOURCE AND NETWORK DESIGN
Cloud CDN Stale Content: Verify the Cache Key and Origin — conceptual GCP operations illustration

First prove which version the origin can serve

A content delivery network caches responses nearer to users. If an origin still serves an old file, purging the edge can simply fetch and cache that old file again. Begin by identifying the accepted release, exact resource URL and origin response rather than repeatedly invalidating every path.

Cache identity can include more than the visible path, depending on configuration. Hostnames and configured request variations can affect which object is being served. Google's invalidation guidance describes targeted removal of cached content; treat that as one release operation rather than a replacement for coherent versioning and cache headers.

Prepare an asset and HTML release contract

  1. Use a release identifier and immutable names for versioned static assets where the application supports them. Keep HTML references and asset publication order compatible.
  2. Document cache policy separately for public static content, HTML and private responses. A private account page must not become publicly cacheable merely to improve delivery speed.
  3. Define an acceptance fixture that includes the expected content version and relevant response headers. Retain the previous accepted release and a targeted invalidation procedure.

For beginners, a hard browser refresh is a test of one client, not evidence that every intermediary cache has changed. A service worker or local browser cache can also affect the visible result. Keep the layers distinct during diagnosis.

Illustrative incident: a stylesheet is overwritten in place

A release replaces an existing stylesheet while keeping its old URL and long freshness policy. Some clients receive a cached earlier copy while the origin contains the new one. This is an illustrative scenario. Restarting the application process cannot by itself retire a still-fresh cached response already delivered elsewhere.

Compare one resource across its delivery path

Record hostname, path, release identifier and observed response. Inspect whether the expected origin serves the correct bytes before evaluating edge invalidation. Avoid adding arbitrary query parameters and calling the result proof of the normal path; that may select a different cache identity.

ObservationEvidenceInvestigation
Origin returns the old versionDeployment path and origin routingPublication fault
Origin is correct, cached response differsCache policy and object identityCache lifecycle
One hostname differs from anotherHost routing and invalidation scopeDelivery configuration
Only an existing browser differsBrowser or service-worker behaviorClient cache layer

Use a non-sensitive public fixture for comparison. Do not expose a protected origin or remove application access controls just to obtain a direct response for debugging.

Recover with a targeted release correction

For the illustrative stylesheet, verify the origin's accepted asset and apply the documented invalidation to the intended scope if needed. Review the next release's versioned naming so correctness no longer depends on overwriting a long-lived URL. Preserve valid cache behavior for unrelated assets.

Verify the normal public URL and the page that references it after the operation. Check multiple relevant hostnames and fresh versus existing client behavior. Confirm that private pages retain their intended cache restrictions. A successful invalidation request is a control-plane result; accepted content at the actual client path is the recovery evidence.

Operating objective and cache SOP

Measure correct release delivery and user-facing errors, with origin load during cache turnover. An illustrative internal release rule could require an HTML-and-assets smoke test before deployment closure. It is not a CDN SLA, a measured speed improvement or a guarantee that already downloaded browser copies can be remotely erased.

The SOP should retain release, origin, resource identity, cache policy, invalidation scope and client acceptance result. Escalate broad invalidation proposals that could increase shared origin load. Review cache identity whenever authentication, localization or query handling changes, because a performance configuration can also alter correctness and confidentiality.

Clouvenix can scope related engineering support around a documented environment and agreed acceptance criteria.

Technical reference

Google Cloud: invalidate cached content. Reviewed 19 October 2026; confirm resource-specific prerequisites and behavior for the deployed configuration.