| /varnish/4/default.vcl |
|---|
| @@ -1,7 +1,11 @@ |
|---|
| vcl 4.0; |
| # Optimized Varnish VCL for load balancing and caching. |
| # original: https://github.com/mattiasgeniar/varnish-4.0-configuration-templates/blob/master/default.vcl |
| # modified: Wizardry and Steamworks (http://grimore.org) |
| ########################################################################### |
| ## Copyright (C) Wizardry and Steamworks 2016 - License: GNU GPLv3 ## |
| ## Please see: http://www.gnu.org/licenses/gpl.html for legal details, ## |
| ## rights of fair usage, the disclaimer and warranty conditions. ## |
| ########################################################################### |
| ## Derived from the original by Mattias Geniar as a starting template. ## |
| ########################################################################### |
| |
| import std; |
| import directors; |
| @@ -101,7 +105,9 @@ |
|---|
| req.method != "TRACE" && |
| req.method != "OPTIONS" && |
| req.method != "PATCH" && |
| req.method != "DELETE") { |
| req.method != "DELETE" && |
| req.method != "PROPFIND" && |
| req.method != "REPORT") { |
| /* Non-RFC2616 or CONNECT which is weird. */ |
| return (pipe); |
| } |
| @@ -139,6 +145,9 @@ |
|---|
| # Remove the "has_js" cookie |
| set req.http.Cookie = regsuball(req.http.Cookie, "has_js=[^;]+(; )?", ""); |
| |
| # Remove any CloudFlare cookies |
| set req.http.Cookie = regsuball(req.http.Cookie, "cf_.=[^;]+(; )?", ""); |
| |
| # Remove any Google Analytics based cookies |
| set req.http.Cookie = regsuball(req.http.Cookie, "__utm.=[^;]+(; )?", ""); |
| set req.http.Cookie = regsuball(req.http.Cookie, "_ga=[^;]+(; )?", ""); |
| @@ -187,10 +196,10 @@ |
|---|
| # A valid discussion could be held on this line: do you really need to cache static files that don't cause load? Only if you have memory left. |
| # Sure, there's disk I/O, but chances are your OS will already have these files in their buffers (thus memory). |
| # Before you blindly enable this, have a read here: https://ma.ttias.be/stop-caching-static-files/ |
| # if (req.url ~ "^[^?]*\.(7z|avi|bmp|bz2|css|csv|doc|docx|eot|flac|flv|gif|gz|ico|jpeg|jpg|js|less|mka|mkv|mov|mp3|mp4|mpeg|mpg|odt|otf|ogg|ogm|opus|pdf|png|ppt|pptx|rar|rtf|svg|svgz|swf|tar|tbz|tgz|ttf|txt|txz|wav|webm|webp|woff|woff2|xls|xlsx|xml|xz|zip)(\?.*)?$") { |
| # unset req.http.Cookie; |
| # return (hash); |
| # } |
| if (req.url ~ "^[^?]*\.(7z|avi|bmp|bz2|css|csv|doc|docx|eot|flac|flv|gif|gz|ico|jpeg|jpg|js|less|mka|mkv|mov|mp3|mp4|mpeg|mpg|odt|otf|ogg|ogm|opus|pdf|png|ppt|pptx|rar|rtf|svg|svgz|swf|tar|tbz|tgz|ttf|txt|txz|wav|webm|webp|woff|woff2|xls|xlsx|xml|xz|zip)(\?.*)?$") { |
| unset req.http.Cookie; |
| return (hash); |
| } |
| |
| # Send Surrogate-Capability headers to announce ESI support to backend |
| set req.http.Surrogate-Capability = "key=ESI/1.0"; |
| @@ -266,7 +275,6 @@ |
|---|
| # https://www.varnish-cache.org/docs/trunk/users-guide/vcl-grace.html |
| # When several clients are requesting the same page Varnish will send one request to the backend and place the others on hold while fetching one copy from the backend. In some products this is called request coalescing and Varnish does this automatically. |
| # If you are serving thousands of hits per second the queue of waiting requests can get huge. There are two potential problems - one is a thundering herd problem - suddenly releasing a thousand threads to serve content might send the load sky high. Secondly - nobody likes to wait. To deal with this we can instruct Varnish to keep the objects in cache beyond their TTL and to serve the waiting requests somewhat stale content. |
| |
| # if (!std.healthy(req.backend_hint) && (obj.ttl + obj.grace > 0s)) { |
| # return (deliver); |
| # } else { |
| @@ -314,12 +322,40 @@ |
|---|
| if (beresp.http.Surrogate-Control ~ "ESI/1.0") { |
| unset beresp.http.Surrogate-Control; |
| set beresp.do_esi = true; |
| set beresp.ttl = 24h; # Set 24h ESI |
| } |
| |
| # Enable cache for all static files |
| # The same argument as the static caches from above: monitor your cache size, if you get data nuked out of it, consider giving up the static file cache. |
| # Before you blindly enable this, have a read here: https://ma.ttias.be/stop-caching-static-files/ |
| if (bereq.url ~ "^[^?]*\.(7z|avi|bmp|bz2|css|csv|doc|docx|eot|flac|flv|gif|gz|ico|jpeg|jpg|js|less|mka|mkv|mov|mp3|mp4|mpeg|mpg|odt|otf|ogg|ogm|opus|pdf|png|ppt|pptx|rar|rtf|svg|svgz|swf|tar|tbz|tgz|ttf|txt|txz|wav|webm|webp|woff|woff2|xls|xlsx|xml|xz|zip)(\?.*)?$") { |
| ### Set content expiration. |
| ## You may want to disable any expiration on the backend (ie: for Apache, disable mod_expires). |
| # 1 Year |
| if(beresp.http.content-type ~ "(?i)(application/(javascript|x\-javascript))|(text/(javascript|css))|(application/(atom\+xml|rdf\+xml|rss\+xml))") { |
| set beresp.http.Expires = "" + (now + 1y); |
| } |
| # 1 Month |
| if(beresp.http.content-type ~ "(?i)(application/(vnd\.ms\-fontobject|font\-woff|x\-font\-(ttf|woff)))|(audio/ogg)|(font/(eot|opentype|woff))|(image/(bmp|gif|jp2|jpeg|png|svg\+xmlwebp))|(video/(mp4|ogg|webm))") { |
| set beresp.http.Expires = "" + (now + 24w); |
| } |
| # 1 Week |
| if(beresp.http.content-type ~ "(?i)(image/(vnd\.microsoft\.icon|x\-icon))|(application/manifest\+json)|(text/x\-cross\-domain\-policy)") { |
| set beresp.http.Expires = "" + (now + 1w); |
| } |
| # Immediately |
| # Not exactly "immediately" since we do not want to have to recache on fast reloads - ideally, set this to average page log time. |
| if(beresp.http.content-type ~ "(?i)(application/(json|ld\+json|schema\+json|vnd\.geo\+jsonxml|x\-web\-app\-manifest\+json))|(text/(xml|cache\-manifest|html))") { |
| set beresp.http.Expires = "" + (now + 3s); |
| } |
| |
| ### GZip content if not already compressed. |
| ## You may want to disable any compression on the backend (ie: for Apache, disable mod_deflate). |
| if(beresp.http.content-type ~ "(?i)(application/(atom\+xml|javascript|json|ld\+json|manifest\+json|rdf\+xml|rss\+xml|schema\+json|vnd\.geo\+json|vnd\.ms\-fontobject|x\-(font\-ttf|javascript|web\-app\-manifest\+json)|xhtml\+xml|xml)|font/(eot|opentype))|(image/(bmp|svg\+xml|vnd\.microsoft\.icon|x\-icon))|(text/(cache\-manifest|css|html|javascript|plain|vcard|vnd\.rim\.location\.xloc|vcalendar|vtt|x\-component|x\-cross\-domain\-policy|xml))") { |
| # Compress object for sending. |
| set beresp.do_gzip = true; |
| } |
| |
| ### Enable cache for all static files |
| ## The same argument as the static caches from above: monitor your cache size, if you get data nuked out of it, consider giving up the static file cache. |
| ## Before you blindly enable this, have a read here: https://ma.ttias.be/stop-caching-static-files/ |
| if(beresp.http.content-type ~ "(?i)(application/(java\-vm|javascript|json|msword|pdf|postscript|rtf|vnd\.ms\-(excel|fontobject|powerpoint)|vnd\.oasis\.opendocument\.text|vnd\.openxmlformats\-officedocument\.(presentationml\.presentation|spreadsheetml\.sheet|wordprocessingml\.document)|x\-(7z\-compressed|bzip2|gzip|rar\-compressed|shockwave\-flash|tar)|x\-font\-(bdf|ghostscript|linux\-psf|otf|pcf|snf|ttf|type1|woff)|xz|xml|zip))|(audio/((mpeg|ogg)|(x\-(flac|matroska|ms\-wma|wav))))|(image/((bmp|gif|jp2|jpeg|png|svg\+xml|vnd\.wap\.wbmp|webp|x\-(icon|pict))))|(text/((css|csv|javascript|plain)))|(video/((mp4|quicktime|webm|x\-(flv|matroska|ms\-wmv|msvideo))))") { |
| unset beresp.http.set-cookie; |
| } |
| |
| @@ -326,7 +362,7 @@ |
|---|
| # Large static files are delivered directly to the end-user without |
| # waiting for Varnish to fully read the file first. |
| # Varnish 4 fully supports Streaming, so use streaming here to avoid locking. |
| if (bereq.url ~ "^[^?]*\.(7z|avi|bz2|flac|flv|gz|mka|mkv|mov|mp3|mp4|mpeg|mpg|ogg|ogm|opus|rar|tar|tgz|tbz|txz|wav|webm|xz|zip)(\?.*)?$") { |
| if (bereq.url ~ "^[^?]*\.(7z|ace|avi|bin|bz2|flac|flv|gz|iso|mka|mkv|mov|mp3|mp4|mpeg|mpg|ogg|ogm|opus|rar|tar|tgz|tbz|txz|wav|webm|wma|wmv|xz|zip)(\?.*)?$") { |
| unset beresp.http.set-cookie; |
| set beresp.do_stream = true; # Check memory usage it'll grow in fetch_chunksize blocks (128k by default) if the backend doesn't send a Content-Length header, so only enable it for big objects |
| } |
