Author: Kiwi Commerce

Magento 2.4.7 remains a top-tier platform for e-commerce businesses, but optimising it for speed and performance is essential to deliver a seamless shopping experience. As competition grows and user expectations evolve, ensuring your Magento store operates at peak efficiency in 2025 is critical. At Kiwi Commerce, we’ve curated the best practices to help you optimise Magento 2.4.7 for superior speed and performance.

1. Stay Updated with the Latest Patches & Updates

Keeping your Magento store updated is the foundation of performance optimisation. Each update brings performance enhancements, bug fixes, and security improvements. Regularly apply patches and updates to maintain a fast and secure store.

2. Enable Full Page Caching with Varnish

Magento 2.4.7 includes built-in Full Page Cache (FPC), which drastically reduces load times for returning visitors. For optimal performance, switch from the default file-based caching system to Varnish Cache.

Steps to Enable Varnish Cache:

• Go to Stores > Configuration > Advanced > System.
• Under Full Page Cache, select Varnish Cache.
• Configure settings based on your hosting environment.
• Deploy the Varnish configuration.

3. Optimise Images for Faster Loading

Unoptimised images can slow down your site. Use WebP format for smaller file sizes without compromising quality. Implement lazy loading to delay loading off-screen images.

Recommended Tools by Kiwi Commerce:

• Magento WebP Images Extension
• ImageOptim or TinyPNG for manual compression
• Lazy Load module for Magento 2

4. Leverage Redis & Memcached for Enhanced Performance

Redis and Memcached improve Magento’s session storage and database performance. Redis is preferred for its scalability and efficiency.

Steps to Enable Redis:

• Install Redis on your server.
• Configure Magento to use Redis for session storage by updating env.php.
• Use Redis for cache storage to boost response times.

5. Minify & Merge CSS/JS Files

Reducing HTTP requests by merging and minifying CSS and JavaScript files can significantly speed up your site.

Steps:

• Navigate to Stores > Configuration > Advanced > Developer.
• Enable Merge CSS & JavaScript Files.
• Enable Minify CSS & JavaScript.

6. Implement a CDN for Global Performance

A Content Delivery Network (CDN) ensures users load content from the nearest server, reducing latency and improving speed.

Kiwi Commerce Recommended CDNs:

• Cloudflare (Free & Paid options)
• Fastly (Official Magento Partner)
• AWS CloudFront

Configure your CDN under Stores > Configuration > General > Web.

7. Optimise Search with Elasticsearch

Magento 2.4.7 uses Elasticsearch as its default search engine, significantly improving product search speeds. Ensure it’s properly configured and optimised.

Steps:

• Install and configure Elasticsearch on your server.
• Set Elasticsearch as the default search engine under Stores > Configuration > Catalogue > Catalogue Search.
• Adjust indexing and query settings for better performance.

8. Optimise Database & Clean Logs

Regular database maintenance prevents slow queries and enhances performance. Reduce log sizes to improve database efficiency.

Steps:

• Enable MySQL Query Caching for frequent queries.
• Reduce Log Retention:
  • Go to Stores > Configuration > Advanced > System.
  • Set Log Cleaning to a reasonable timeframe (e.g., 30 days).

9. Switch to Production Mode for Live Stores

Magento has three modes: default, developer, and production. Always run live stores in Production Mode for optimal performance.

10. Upgrade Your Hosting Infrastructure

Your hosting environment is critical to performance. For Magento 2.4.7, consider:

• Upgrading to PHP 8.2 for faster execution and better security.
• Using SSD-based hosting for quicker data retrieval.
• Opting for scalable cloud solutions like AWS, Google Cloud, or DigitalOcean.

Conclusion

Optimising Magento 2.4.7 for speed and performance in 2025 requires a strategic approach, including caching, database tuning, code minification, and infrastructure upgrades. At Kiwi Commerce, we specialise in helping businesses achieve faster, more efficient, and scalable Magento stores. Implement these best practices today to stay ahead in the competitive e-commerce landscape.

Let Kiwi Commerce power your Magento store’s success in 2025 and beyond!

Magento 2 extension attributes offer a flexible way to extend core and custom entities without changing their original classes. These attributes are especially useful when working with APIs, enabling additional data to be added to API responses or set via API requests. In this guide, we will walk you through how to create an extension attribute and use it within Magento 2 APIs using the Kiwi_ExtensionAttribute module.

---

What Are Extension Attributes?

Extension attributes are extra fields that can be added to entities such as products, orders, and customers in Magento 2. Unlike traditional EAV attributes, extension attributes do not automatically store data in the database. Instead, they are dynamically retrieved through plugins or data providers when needed.

---

Step-by-Step Guide to Creating an Extension Attribute in Magento 2 API

Step 1: Define the Extension Attribute
Start by creating the extension_attributes.xml file to declare the new attribute for the Magento product entity.

📂 app/code/Kiwi/ExtensionAttribute/etc/extension_attributes.xml

<?xml version=”1.0″?>

<extension_attributes xmlns:xsi=”http://www.w3.org/2001/XMLSchema-instance” xsi:noNamespaceSchemaLocation=”urn:magento:framework:Api/etc/extension_attributes.xsd”>

    <extension_attribute for=”Magento\Catalog\Api\Data\ProductInterface” code=”custom_attribute”>

        <type>string</type>

    </extension_attribute>

</extension_attributes>

---

Step 2: Create a Data Interface
Define the getter and setter methods for the new extension attribute.

📂 app/code/Kiwi/ExtensionAttribute/Api/Data/CustomAttributeInterface.php

<?php

namespace Kiwi\ExtensionAttribute\Api\Data;

interface CustomAttributeInterface

{

    public function getCustomAttribute();

    public function setCustomAttribute($customAttribute);

}

---

Step 3: Create the API Repository
Implement the repository that handles retrieving and setting the extension attribute.

📂 app/code/Kiwi/ExtensionAttribute/Model/CustomAttributeRepository.php

<?php

namespace Kiwi\ExtensionAttribute\Model;

use Kiwi\ExtensionAttribute\Api\CustomAttributeRepositoryInterface;

use Magento\Catalog\Api\ProductRepositoryInterface;

use Magento\Catalog\Api\Data\ProductExtensionFactory;

class CustomAttributeRepository implements CustomAttributeRepositoryInterface

{

    protected $productRepository;

    protected $productExtensionFactory;

    public function __construct(

        ProductRepositoryInterface $productRepository,

        ProductExtensionFactory $productExtensionFactory

    ) {

        $this->productRepository = $productRepository;

        $this->productExtensionFactory = $productExtensionFactory;

    }

    public function getCustomAttribute($sku)

    {

        $product = $this->productRepository->get($sku);

        $extensionAttributes = $product->getExtensionAttributes();

        return $extensionAttributes ? $extensionAttributes->getCustomAttribute() : null;

    }

    public function setCustomAttribute($sku, $value)

    {

        $product = $this->productRepository->get($sku);

        $extensionAttributes = $product->getExtensionAttributes() ?: $this->productExtensionFactory->create();

        $extensionAttributes->setCustomAttribute($value);

        $product->setExtensionAttributes($extensionAttributes);

        $this->productRepository->save($product);

        return $product;

    }

}

---

Step 4: Register the API Routes
Define the endpoints for getting and setting the custom attribute.

📂 app/code/Kiwi/ExtensionAttribute/etc/webapi.xml

<?xml version=”1.0″?>

<routes xmlns:xsi=”http://www.w3.org/2001/XMLSchema-instance” xsi:noNamespaceSchemaLocation=”urn:magento:framework:Webapi/etc/webapi.xsd”>

    <route url=”/V1/products/:sku/custom-attribute” method=”GET”>

        <service class=”Kiwi\ExtensionAttribute\Api\CustomAttributeRepositoryInterface” method=”getCustomAttribute”/>

        <resources>

            <resource ref=”Magento_Catalog::products” />

        </resources>

    </route>

    <route url=”/V1/products/:sku/custom-attribute” method=”POST”>

        <service class=”Kiwi\ExtensionAttribute\Api\CustomAttributeRepositoryInterface” method=”setCustomAttribute”/>

        <resources>

            <resource ref=”Magento_Catalog::products” />

        </resources>

        <data>

            <parameter name=”sku” force=”true”>%sku</parameter>

            <parameter name=”value” xsi:type=”string” force=”true”/>

        </data>

    </route>

</routes>

---

Step 5: Implement the Plugin to Inject the Attribute
A plugin is used to inject the attribute value into API responses dynamically.

📂 app/code/Kiwi/ExtensionAttribute/Plugin/ProductExtension.php

<?php

namespace Kiwi\ExtensionAttribute\Plugin;

use Magento\Catalog\Api\Data\ProductInterface;

use Magento\Catalog\Api\Data\ProductExtensionFactory;

use Magento\Catalog\Api\ProductRepositoryInterface;

class ProductExtension

{

    protected $productExtensionFactory;

    public function __construct(ProductExtensionFactory $productExtensionFactory)

    {

        $this->productExtensionFactory = $productExtensionFactory;

    }

    public function afterGetById(ProductRepositoryInterface $subject, ProductInterface $product)

    {

        $extensionAttributes = $product->getExtensionAttributes() ?: $this->productExtensionFactory->create();

        $extensionAttributes->setCustomAttribute(‘Custom Value’);

        $product->setExtensionAttributes($extensionAttributes);

        return $product;

    }

}

---

Step 6: Test the API
Now, test the created API to get and set the custom attribute.

Get Custom Attribute

curl -X GET “https://yourstore.com/rest/V1/products/sample-sku/custom-attribute”

Response:

{

    “custom_attribute”: “Custom Value”

}

Set Custom Attribute

curl -X POST “https://yourstore.com/rest/V1/products/sample-sku/custom-attribute” \

-H “Content-Type: application/json” \

–data ‘{“value”:”New Custom Value”}’

Response:

{

    “custom_attribute”: “New Custom Value”

}

---

Conclusion

Magento 2’s extension attributes offer a powerful way to extend your entities dynamically without modifying core files. With this guide, you’ve successfully:

• Defined a new extension attribute.
• Created an API to retrieve and set the attribute.
• Implemented a plugin to inject the attribute values into API responses.
• Tested your API to ensure everything works as expected.

Magento 2 provides a robust foundation for creating secure online stores, but maintaining strong security requires an ongoing, proactive approach. With the ever-evolving landscape of cyber threats, it’s essential to adopt the right security measures to safeguard your online business. In this blog, Kiwi Commerce explores some effective strategies to enhance the security of your Magento 2 store and ensure your customers’ data remains protected.

1. Keep Magento and Extensions Updated

One of the most crucial aspects of Magento 2 security is keeping both the platform and all installed extensions up to date. Security patches are released regularly to address newly discovered vulnerabilities, and outdated software becomes an easy target for cyber attackers. To maintain security, schedule regular updates, test them in a staging environment, and deploy them as soon as they are confirmed to be stable.

Why It Matters:
By updating Magento and extensions promptly, you reduce the risk of known security flaws being exploited. Regular updates help ensure that your store remains protected from emerging threats.

2. Enable Two-Factor Authentication (2FA)

Magento 2 supports Two-Factor Authentication (2FA) out of the box, which adds an extra layer of security to your admin accounts. With 2FA enabled, even if an attacker obtains your password, they won’t be able to access your account without the second authentication step, which typically involves a mobile app or email.

Why It Matters:
2FA significantly enhances the security of your store by requiring more than just a password to gain access, making it much harder for attackers to infiltrate your system.

3. Use a Unique Admin URL

Default admin URLs like /admin are easy targets for attackers who scan websites for common login pages. By changing your admin URL to something unique, you make it significantly harder for automated attacks or brute-force login attempts to succeed.

Why It Matters:
A unique admin URL adds a layer of obscurity to your store’s backend, reducing the chances of cyber attackers targeting your login page.

4. Implement a Web Application Firewall (WAF)

A Web Application Firewall (WAF) serves as your first line of defence against malicious traffic. A WAF can filter out harmful requests before they reach your Magento store, blocking threats such as SQL injection, cross-site scripting (XSS), and other common attacks. Popular WAF services like Cloudflare or Sucuri can be easily integrated with Magento.

Why It Matters:
By implementing a WAF, you proactively block malicious traffic and reduce the likelihood of attacks affecting your store. It’s an essential security tool for protecting your website from a range of threats.

5. Enforce HTTPS for All Connections

Installing an SSL certificate ensures that all data exchanged between your Magento store and users is encrypted. HTTPS not only helps protect sensitive customer information but also serves as a trust signal, reassuring your visitors that their data is secure. Additionally, HTTPS is a ranking factor for search engines, which can benefit your store’s visibility.

Why It Matters:
Secure connections via HTTPS are essential for customer trust and SEO performance. Without HTTPS, your store is vulnerable to data breaches, and you could lose potential customers.

6. Strengthen Server Security

Securing your hosting server is just as important as securing your Magento 2 store. To protect against intrusions, restrict access to critical files (such as env.php), close unused ports, and configure tools like fail2ban to block suspicious IP addresses. You may also want to consider using a dedicated or cloud hosting provider that offers enhanced security options.

Why It Matters:
Securing your server ensures that attackers can’t gain access to critical files or use your server as a point of entry to compromise your store.

7. Use Strong Admin and User Credentials

Weak passwords continue to be a common cause of data breaches. Enforce strong, unique passwords for all admin accounts and user logins, combining uppercase and lowercase letters, numbers, and special characters. Additionally, conduct regular audits of user roles and permissions, removing inactive or unnecessary accounts to minimise potential attack vectors.

Why It Matters:
Strong passwords and proper access control reduce the risk of unauthorised access, making it more difficult for attackers to breach your Magento 2 store.

8. Set Correct File and Directory Permissions

Incorrect file and directory permissions can expose sensitive files to unauthorised users. Ensure that file permissions are set securely, such as 644 for files and 755 for directories. Avoid using overly permissive settings like 777, as this allows anyone to modify files.

Why It Matters:
By properly configuring file and directory permissions, you ensure that only authorised users and processes have access to critical files, preventing unauthorised modifications.

9. Monitor and Review Activity Logs

Magento 2 includes a powerful logging feature that tracks admin activities and system events. By reviewing activity logs regularly, you can spot unusual actions such as multiple failed login attempts, unauthorised file changes, or spikes in resource usage.

Why It Matters:
Regularly monitoring activity logs helps you detect abnormal behaviour before it turns into a serious issue. Proactive log monitoring is essential for identifying potential security breaches early.

10. Defend Against Brute-Force Attacks

Brute-force attacks involve hackers repeatedly attempting to guess login credentials by trying various combinations. To protect against this, limit the number of failed login attempts, enable CAPTCHA on all admin login pages, and implement CAPTCHA on customer account creation forms.

Why It Matters:
Brute-force attacks are one of the most common ways cybercriminals attempt to gain access to accounts. Limiting failed attempts and using CAPTCHA makes it much more difficult for attackers to succeed.

---

Final Thoughts by Kiwi Commerce

Securing your Magento 2 store is an ongoing process that requires a multi-layered approach. By implementing the strategies mentioned above, you can significantly enhance your store’s security and protect both your business and your customers from potential threats. Whether you’re updating your software, enabling two-factor authentication, or monitoring activity logs, each step plays a crucial role in safeguarding your store.

Investing in the security of your online store is not only essential for protecting sensitive data but also for maintaining customer trust and improving your store’s overall performance. Take action today with Kiwi Commerce and ensure your Magento 2 store remains safe, secure, and ready for growth.

Magento 2 drives the success of many online businesses, but its advanced technology often operates behind the scenes. This guide offers an easy-to-understand look at some of the key features of Magento 2, explaining the tech that powers your store to keep everything running smoothly, even if you’re not technically inclined.

1. Cache Systems: Improving Speed and Efficiency

What Is It?
Magento 2 uses cache systems to store frequently requested data temporarily, speeding up your website’s loading time. Think of it as a digital filing system: instead of fetching the same data repeatedly, Magento pulls it from a pre-sorted “cache,” speeding up the process.

Why Does It Matter?

• Faster Page Loads: By storing frequently accessed data, Magento ensures your site loads quickly, so customers can view products and complete transactions more easily.
• Better User Experience: Speed is vital for keeping visitors on your site and reducing the likelihood of them leaving before making a purchase.

Types of Magento Cache:

• Full Page Cache (FPC): Saves complete web pages, so Magento simply serves the saved page rather than rebuilding it.
• Block Cache: Stores parts of a page, such as product lists, to avoid reloading them each time.

2. GraphQL: Streamlining Data Communication

What Is It?
GraphQL is a modern solution for data exchange between your site’s front-end and back-end. It’s more efficient than traditional APIs, allowing faster, more flexible data transfers between your website and server.

Why Does It Matter?

• Efficient Data Requests: GraphQL only asks for the exact data needed, instead of loading unnecessary information, similar to ordering a specific item from a menu.
• Faster Interactions: By loading only the necessary data, your store responds more quickly, providing a smoother user experience.

Benefit for Your Store:
GraphQL enhances Magento 2’s Progressive Web Application (PWA) features, delivering faster content without reloading entire pages, creating a dynamic, app-like experience for customers.

3. Progressive Web Applications (PWA): Merging Web and App Experiences

What Is It?
PWA technology allows your store to function like a mobile app without needing to download anything. Magento 2’s support for PWAs makes online shopping faster, more reliable, and more engaging, all without the need for an app installation.

Why Does It Matter?

• Optimised for Mobile: PWAs ensure your site loads quickly on mobile devices and even works offline in areas with low connectivity.
• Push Notifications: Engage customers with timely alerts about sales, promotions, or cart updates, just like a mobile app would.
• Better Than Regular Websites: PWAs cache content more effectively, improving performance and giving your store an app-like experience without taking up storage.

Breaking Down the Key Magento 2 Features:

• Cache System = Quicker Access
  Analogy: Like a librarian retrieving a book quickly, rather than waiting for it to be printed.
  User Benefit: Faster page loading, which improves customer satisfaction and engagement.
• GraphQL = Simplified Data Requests
  Analogy: GraphQL is like a waiter taking your exact order, rather than offering a full menu.
  User Benefit: Reduced data load, making browsing and transactions faster and smoother.
• PWA = App-Like Experience Without Downloading
  Analogy: PWAs make websites feel like apps, without requiring users to download anything.
  User Benefit: Seamless and fast performance, especially on mobile devices.

Why This Technology Matters for Online Store Owners

For merchants using Magento 2, these improvements bring numerous advantages:

• Enhanced Customer Satisfaction: Faster load times and improved mobile functionality provide a better shopping experience.
• Optimised Store Performance: Your site runs more reliably on all devices and platforms.
• Time and Cost Savings: Pre-built features like GraphQL save development time, making future upgrades easier.

---

At Kiwi Commerce, we specialise in helping you harness the power of Magento 2’s advanced technology. Our expertise ensures your store is optimised for performance, speed, and customer engagement, helping your business thrive online.