Author: [TO BE CONFIRMED] · Published: October 25, 2026
A traffic spike is the best problem a website can have — a sale, a viral post, a press mention, a product launch — unless the site goes down in the middle of it. Then the spike becomes lost sales, frustrated visitors and a reputation hit that outlasts the event.
The difference between a site that survives a spike and one that does not is almost never luck. It is preparation done weeks in advance, when there is time to test and fix things. This guide covers that preparation, in the order that matters.
Step 1: Know Your Baseline — and Your Breaking Point
You cannot prepare for a spike if you do not know what your site can currently handle. Start by measuring the baseline:
Normal traffic: daily visitors, peak concurrent users, and the busiest pages. Your analytics and server logs will tell you this.
Current resource usage: CPU, memory and database load during normal peaks. If the server is already running hot on an ordinary day, it has no headroom for a spike.
Then find the breaking point with a load test. Tools such as k6, Apache JMeter and Locust simulate many simultaneous visitors and report when response times degrade and errors begin. Run the test against a staging copy that mirrors production — never load-test the live site, and never load-test without warning your host, since a load test looks exactly like an attack to automated defences.
A load test answers the only question that matters: how many concurrent users can the site serve before it slows down or fails? If the answer is below the traffic you expect, you have work to do — and now you know how much.
Step 2: Make the Site Cheaper to Serve
The cheapest way to survive a spike is to reduce the work each visit requires. Every request your origin server does not have to process is capacity you keep in reserve.
Cache aggressively. Page caching should be verified working before the event, not assumed. Load a page twice and confirm the second load is served from cache with a much lower Time to First Byte. For WordPress, a full-page cache plus object caching (Redis or Memcached, if your host offers it) is the standard combination. [TO BE CONFIRMED: which caching options Offshore Hosting plans include.]
Use a CDN. A CDN serves your static assets — images, CSS, JavaScript — from edge locations near visitors, and absorbs a large share of the surge from cache instead of passing it to your origin. See CDN vs web hosting and when you need both for the details, including what a CDN does and does not cache. Enable it well before the event so you can verify cache hit rates under normal traffic first.
Optimise the heavy pages. The pages the spike will hit hardest are usually the homepage, a landing page and a product or checkout page. Optimise those specifically: compress images, defer non-critical JavaScript, and remove anything that is not needed for the event. A chat widget, a social feed and three tracking scripts each add server and browser work on every visit.
Reduce database work. Database queries are the most common bottleneck under load. Slow queries that are invisible at ten visitors a minute become fatal at a hundred. Use Query Monitor or your slow query log to find them, and add indexes or caching where it helps. Disable or defer anything that writes to the database on every page view — live visitor counters, uncached statistics plugins and similar features are a liability during a spike.
Step 3: Scale the Resources Before the Event
If the load test shows the site cannot handle the expected traffic, scale up before the event, not during it:
Upgrade the plan temporarily. Moving to a larger hosting plan or a bigger VPS for the duration of a campaign is a normal, sensible cost. Downgrade afterwards if the traffic does not stay. [TO BE CONFIRMED: Offshore Hosting’s upgrade process and whether plan changes take effect immediately.]
Increase PHP workers and memory limits. On a VPS or managed plan, the number of concurrent PHP processes is often the real limit. Raising it — within the server’s memory — directly raises the number of simultaneous visitors the site can serve. See how to size a VPS for your application.
Check the database server. If the database runs on the same machine as the web server, make sure it has enough memory for its buffers and caches. A database that starts swapping to disk under load will slow everything down.
Confirm backups and restores work. A spike is the worst time to discover a backup is broken. Take a fresh backup before the event and confirm you can restore it — see how to back up and restore WordPress.
Do the scaling at least a few days early, then re-run the load test to confirm the new capacity. Scaling on the morning of the event leaves no time to discover that the new configuration has a problem.
Step 4: Protect the Checkout and the Critical Path
Not all pages are equal during a spike. Identify the critical path — the sequence of pages that turns a visitor into a customer — and protect it:
Keep the checkout light. Remove non-essential elements from checkout pages: related products, social feeds, heavy images. Every extra request on checkout is a chance to lose a sale.
Disable or defer non-essential features. Live search suggestions, recently-viewed widgets and recommendation engines all cost database queries. Consider simplifying them for the duration of the event.
Watch out for third-party dependencies. Payment gateways, shipping calculators, email verification and analytics all sit on the critical path. If a third-party service is slow, your checkout is slow. Have a fallback plan — for example, a way to take orders if the payment gateway has problems — and know who to contact.
Rate-limit sensibly. A spike of genuine visitors is good; a spike of bots is not. Bot traffic, scrapers and credential-stuffing attempts often ride along with real surges. A CDN-level firewall and rate limiting on login and search endpoints keep the bad traffic from consuming the capacity you prepared for real visitors.
Step 5: Monitor During the Event
Preparation without monitoring is guesswork. During the spike, watch:
Server resources: CPU, memory, disk I/O and database load. Set alerts for thresholds — for example, CPU sustained above 80% or memory above 85% — so you are warned before the server fails, not after.
Response times and error rates: a rising 5xx error rate is the earliest sign of trouble. Watch the server error log as well as your uptime monitor.
Real-user performance: Core Web Vitals and page load times degrade under load. If LCP climbs sharply during the event, the server is struggling — see Core Web Vitals for WordPress site owners.
The CDN cache hit rate: a falling hit rate means more traffic is reaching the origin. Check that cache purging has not been triggered accidentally, and that new content is being cached correctly.
Assign one person to watch the numbers and one person authorised to act — scaling up, disabling a feature, or contacting support. Decisions made in a panic, by whoever happens to be online, are how small problems become outages.
Step 6: Write a Runbook
A one-page runbook, written before the event, is worth more than any amount of improvisation:
Who does what: names, roles, and how to reach each person.
The escalation path: when to scale up, when to disable a feature, when to contact hosting support — and the support contact details.
The rollback steps: how to restore the backup, how to disable the CDN, how to revert a change.
The thresholds: the specific numbers that trigger each action (for example, “if 5xx errors exceed 1% for five minutes, disable the live-search plugin”).
The communication plan: what to tell customers if the site does slow down, and where (a status page, social media, email).
Keep it short and practical. A runbook nobody reads is decoration; a one-page checklist people actually follow is insurance.
After the Spike
When the traffic subsides, do a short review while the details are fresh: what broke, what nearly broke, what the peak numbers actually were, and what you would change next time. Save the load-test results and the monitoring graphs. The next spike will be easier to prepare for, because you will be planning from real data instead of guesses.
Then scale resources back down if the traffic has returned to normal — there is no reason to pay for capacity you no longer need — and keep the optimisations. The caching, the image compression and the slow-query fixes that saved you during the spike make the site faster every day.
Sources
Cloudflare: What is a CDN?: https://www.cloudflare.com/learning/cdn/what-is-a-cdn/
Cloudflare Cache (CDN): Get started with Cache: https://developers.cloudflare.com/cache/get-started/
Web Vitals — web.dev: https://web.dev/articles/vitals
WordPress: Backing up your database: https://developer.wordpress.org/advanced-administration/security/backup/database/
Sources
{‘title’: ‘Cloudflare: What is a CDN?’, ‘url’: ‘https://www.cloudflare.com/learning/cdn/what-is-a-cdn/’}
{‘title’: ‘Cloudflare Cache (CDN): Get started with Cache’, ‘url’: ‘https://developers.cloudflare.com/cache/get-started/’}
Reseller hosting lets you sell hosting under your own brand while the provider runs the servers. This guide explains how it works, who it suits, how to start, and the checks that matter before you choose a plan.
HTTP/3 is the newest version of the protocol that delivers web pages, and QUIC is the transport underneath it. This guide explains what changed, why it helps on real networks, and the short list of things a site owner needs to do.
cPanel, Plesk and DirectAdmin all run hosting accounts, but they differ in interface, pricing model, operating systems and weight. This comparison explains the real differences so you can choose a panel for the way you actually work.