<div dir="ltr">root@squid:~# curl -i --insecure --proxy <a href="http://squid:3128/">http://squid:3128/</a> "<a href="https://10.170.31.75/redfish/v1/Oem/Supermicro/HGX_H100/Systems/HGX_Baseboard_0/Processors/GPU_SXM_4/ProcessorMetrics">https://10.170.31.75/redfish/v1/Oem/Supermicro/HGX_H100/Systems/HGX_Baseboard_0/Processors/GPU_SXM_4/ProcessorMetrics</a>"<br>HTTP/1.1 200 Connection established<br><br>HTTP/1.1 200 OK<br>Link: <<a href="http://redfish.dmtf.org/schemas/v1/Z.v1_5_2.json">http://redfish.dmtf.org/schemas/v1/Z.v1_5_2.json</a>>; rel=describedby<br>Allow: GET<br>Content-Length: 1173<br>Content-Type: application/json; charset=UTF-8<br>Strict-Transport-Security: max-age=31536000; includeSubdomains<br>X-XSS-Protection: 1; mode=block<br>Content-Security-Policy: default-src 'self';connect-src 'self' ws: wss:;frame-src 'self';img-src 'self' data:;object-src 'self';font-src 'self' data:;script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline';worker-src 'self' blob:;<br>X-Frame-Options: SAMEORIGIN<br>X-Content-Type-Options: nosniff<br>OData-Version: 4.0<br>Date: Fri, 11 Oct 2024 18:03:49 GMT<br>Cache-Status: squid;detail=mismatch<br>Via: 1.1 squid (squid/6.10)<br>Connection: keep-alive<br><div>Cache-Control: public, max-age=1800</div><div><br></div><div>Second run:</div><div><br></div><div>curl -i --insecure --proxy <a href="http://squid:3128/">http://squid:3128/</a> "<a href="https://10.170.31.75/redfish/v1/Oem/Supermicro/HGX_H100/Systems/HGX_Baseboard_0/Processors/GPU_SXM_4/ProcessorMetrics">https://10.170.31.75/redfish/v1/Oem/Supermicro/HGX_H100/Systems/HGX_Baseboard_0/Processors/GPU_SXM_4/ProcessorMetrics</a>"<br>HTTP/1.1 200 Connection established<br><br>HTTP/1.1 200 OK<br>Link: <<a href="http://redfish.dmtf.org/schemas/v1/Z.v1_5_2.json">http://redfish.dmtf.org/schemas/v1/Z.v1_5_2.json</a>>; rel=describedby<br>Allow: GET<br>Content-Length: 1173<br>Content-Type: application/json; charset=UTF-8<br>Strict-Transport-Security: max-age=31536000; includeSubdomains<br>X-XSS-Protection: 1; mode=block<br>Content-Security-Policy: default-src 'self';connect-src 'self' ws: wss:;frame-src 'self';img-src 'self' data:;object-src 'self';font-src 'self' data:;script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline';worker-src 'self' blob:;<br>X-Frame-Options: SAMEORIGIN<br>X-Content-Type-Options: nosniff<br>OData-Version: 4.0<br>Date: Fri, 11 Oct 2024 18:05:16 GMT<br>Cache-Status: squid;detail=mismatch<br>Via: 1.1 squid (squid/6.10)<br>Connection: keep-alive<br>Cache-Control: public, max-age=1800</div><div><br></div><div>Logs:</div><div><br></div><div>1728669831.300 40 10.65.34.5 NONE_NONE/200 0 CONNECT <a href="http://10.170.31.75:443">10.170.31.75:443</a> - HIER_NONE/- - [Host: <a href="http://10.170.31.75:443">10.170.31.75:443</a>\r\nUser-Agent: curl/7.81.0\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.1 200 Connection established\r\n\r\n]<br>1728669831.847 546 10.65.34.5 TCP_MISS/200 2000 GET <a href="https://10.170.31.75/redfish/v1/Oem/Supermicro/HGX_H100/Systems/HGX_Baseboard_0/Processors/GPU_SXM_4/ProcessorMetrics">https://10.170.31.75/redfish/v1/Oem/Supermicro/HGX_H100/Systems/HGX_Baseboard_0/Processors/GPU_SXM_4/ProcessorMetrics</a> - HIER_DIRECT/<a href="http://10.170.31.75">10.170.31.75</a> application/json [Host: 10.170.31.75\r\nUser-Agent: curl/7.81.0\r\nAccept: */*\r\n] [HTTP/1.1 200 OK\r\nLink: <<a href="http://redfish.dmtf.org/schemas/v1/Z.v1_5_2.json">http://redfish.dmtf.org/schemas/v1/Z.v1_5_2.json</a>>; rel=describedby\r\nAllow: GET\r\nContent-Length: 1173\r\nContent-Type: application/json; charset=UTF-8\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains\r\nX-XSS-Protection: 1; mode=block\r\nContent-Security-Policy: default-src 'self';connect-src 'self' ws: wss:;frame-src 'self';img-src 'self' data:;object-src 'self';font-src 'self' data:;script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline';worker-src 'self' blob:;\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nOData-Version: 4.0\r\nDate: Fri, 11 Oct 2024 18:03:49 GMT\r\nCache-Status: squid;detail=mismatch\r\nVia: 1.1 squid squid/6.10)\r\nConnection: keep-alive\r\nCache-Control: public, max-age=1800\r\n\r\n]<br>1728669917.657 39 10.65.34.5 NONE_NONE/200 0 CONNECT <a href="http://10.170.31.75:443">10.170.31.75:443</a> - HIER_NONE/- - [Host: <a href="http://10.170.31.75:443">10.170.31.75:443</a>\r\nUser-Agent: curl/7.81.0\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.1 200 Connection established\r\n\r\n]<br>1728669918.269 611 10.65.34.5 TCP_MISS/200 2000 GET <a href="https://10.170.31.75/redfish/v1/Oem/Supermicro/HGX_H100/Systems/HGX_Baseboard_0/Processors/GPU_SXM_4/ProcessorMetrics">https://10.170.31.75/redfish/v1/Oem/Supermicro/HGX_H100/Systems/HGX_Baseboard_0/Processors/GPU_SXM_4/ProcessorMetrics</a> - HIER_DIRECT/<a href="http://10.170.31.75">10.170.31.75</a> application/json [Host: 10.170.31.75\r\nUser-Agent: curl/7.81.0\r\nAccept: */*\r\n] [HTTP/1.1 200 OK\r\nLink: <<a href="http://redfish.dmtf.org/schemas/v1/Z.v1_5_2.json">http://redfish.dmtf.org/schemas/v1/Z.v1_5_2.json</a>>; rel=describedby\r\nAllow: GET\r\nContent-Length: 1173\r\nContent-Type: application/json; charset=UTF-8\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains\r\nX-XSS-Protection: 1; mode=block\r\nContent-Security-Policy: default-src 'self';connect-src 'self' ws: wss:;frame-src 'self';img-src 'self' data:;object-src 'self';font-src 'self' data:;script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline';worker-src 'self' blob:;\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nOData-Version: 4.0\r\nDate: Fri, 11 Oct 2024 18:05:16 GMT\r\nCache-Status: squid;detail=mismatch\r\nVia: 1.1 squid (squid/6.10)\r\nConnection: keep-alive\r\nCache-Control: public, max-age=1800\r\n\r\n]</div><div><br></div><div>1728669831.847 RELEASE -1 FFFFFFFF 020000000000000031450B0001000000 200 1728669829 -1 -1 application/json 1173/1173 GET <a href="https://10.170.31.75/redfish/v1/Oem/Supermicro/HGX_H100/Systems/HGX_Baseboard_0/Processors/GPU_SXM_4/ProcessorMetrics">https://10.170.31.75/redfish/v1/Oem/Supermicro/HGX_H100/Systems/HGX_Baseboard_0/Processors/GPU_SXM_4/ProcessorMetrics</a><br>1728669918.269 RELEASE -1 FFFFFFFF 02000000000000002E450B0004000000 200 1728669916 -1 -1 application/json 1173/1173 GET <a href="https://10.170.31.75/redfish/v1/Oem/Supermicro/HGX_H100/Systems/HGX_Baseboard_0/Processors/GPU_SXM_4/ProcessorMetrics">https://10.170.31.75/redfish/v1/Oem/Supermicro/HGX_H100/Systems/HGX_Baseboard_0/Processors/GPU_SXM_4/ProcessorMetrics</a></div><div><br></div><div>Cache log: <a href="https://p.bsd-unix.net/?bfc9a1568c49f0b6#89PnEqmjNr7iLh1ZYTLVbgbt4FouhW2RekSxeaZ3xZZs" id="gmail-pasteurl" rel="nofollow noopener noreferrer" style="box-sizing:border-box;background-color:rgb(223,240,216);color:rgb(0,136,204);text-decoration:none;font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;white-space:normal">https://p.bsd-unix.net/?bfc9a1568c49f0b6#89PnEqmjNr7iLh1ZYTLVbgbt4FouhW2RekSxeaZ3xZZs</a></div><div><br></div><div>Happy to jump on irc/discord/matrix/whatever for help if easier to debug!</div><div><br></div><div>Thanks!<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Oct 11, 2024 at 4:17 AM Amos Jeffries <<a href="mailto:squid3@treenet.co.nz">squid3@treenet.co.nz</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On 11/10/24 11:08, Bryan Seitz wrote:<br>
> I removed the header mods and changed the refresh pattern to:<br>
> <br>
> refresh_pattern . 15 20% 1800 override-expire <br>
> ignore-no-cache ignore-no-store ignore-private<br>
> <br>
> And I always get TCP_MISS. Any other thoughts?<br>
<br>
Ah, I believe it would be best to get a baseline of what Squid default <br>
behaviour is like in your environment. So we can identify what/how you <br>
need to improve it.<br>
<br>
<br>
Firstly, FYI; this is what those controls **actually** do in current <br>
Squid ..<br>
<br>
* override-expires ... forces Squid to handle all responses to act as <br>
if they received "Cache-Control: max-age=900" (15 min) ... store, but <br>
revalidate 180+ seconds (20% of 15min) later.<br>
Result: Anything that could cache longer than 15min becomes a <br>
REFRESH_MISS or MISS, instead of HIT.<br>
Squid default: **do** cache. Revalidate<br>
* after("Date"+"CC: max-age=N") timestamp, otherwise<br>
* after "Expires" timestamp, otherwise<br>
* after ("Date" +1800 minutes) timestamp.<br>
<br>
* ignore-no-cache ... the standardized "CC: no-cache" is badly named, <br>
it tells Squid what **can** be cached.<br>
Result: Squid will discard many stored objects and perform a MISS <br>
instead.<br>
Squid default: **do** cache "CC:private" responses, revalidate on <br>
HIT. Log as REFRESH.<br>
<br>
* ignore-no-store ... force everything marked "CC: no-store" to be stored.<br>
Result: cache fills with non-reusable objects. Leaving not much room <br>
for actual HIT objects.<br>
Squid default: store only objects with can result in more HITs.<br>
<br>
* ignore-private ... force everything with "CC: private" to be discarded.<br>
Result: same as "ignore-no-store".<br>
Squid default: **do** cache "CC:private" responses, revalidate on HIT.<br>
<br>
Note that both HIT and REFRESH mean the object **was** cached.<br>
<br>
<br>
You said that the access.log now contains MISS. Would that be just <br>
"MISS" or "REFRESH" + "MISS" (actually a HIT, but a new object was given <br>
by the server and replaced the pre-stored object).<br>
<br>
<br>
Can you show a pair of request headers from the client, with matching <br>
response from the server? You can use "debug_options 11,2" in recent <br>
Squid versions to get a cache.log trace of the HTTP transactions.<br>
<br>
That might help us spot something more specific. The config change makes <br>
the earlier given ones obsolete.<br>
<br>
<br>
HTH<br>
Amos<br>
<br>
<br>
_______________________________________________<br>
squid-users mailing list<br>
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
<a href="https://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer" target="_blank">https://lists.squid-cache.org/listinfo/squid-users</a><br>
</blockquote></div><br clear="all"><br><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature">Bryan Seitz<br><a href="mailto:seitzbg@gmail.com" target="_blank">seitzbg@gmail.com</a></div>