Memcached

Memcached at a glance

Memcached is a widely used high-performance in-memory caching system, speeding up applications by caching data and objects. Memcached ships releases in an unhurried cadence plus security fixes; the dominant security concern is exposure rather than frequent patching.

For admins the cardinal rule: never expose Memcached to the internet — an open instance has been notoriously abused for large amplification DDoS attacks and can leak cached data. Bind it to localhost or the internal network, disable UDP if unused, and use authentication (SASL) where the deployment supports it. Memcached usually comes from the distribution; keep it patched, but the configuration is where most risk lives. After changes, verify that applications still cache correctly. Because cached data is transient, the operational risk is low, but the exposure risk is high — lock it down. Patchletter surfaces new Memcached releases.