[squid-users] Squid 6.10 SSL-Bump Woes

[Amos Jeffries]

Okay, I am seeing the server response is marked "private" and 7hrs old 
(25200sec).

Replacing the Cache-Control header using "max-age=1800" is not having 
noticeable effect because 25200sec is already past the 1800sec limit.


What you need to do there instead is:

  1) remove the config changing Cache-Control header.

  2) modify the "refresh_pattern . " line to be this:

  refresh_pattern . 0 20% 4320 ignore-private reload-into-ims


Your Squid should then cache the server response and treat the "private" 
as if it were a "must-revalidate".


Please do that then provide a new cache.log trace for us to see how the 
server handles a revalidation check.


Amos