mlibbey

Here's a snippet of a machine in our production, where we have a SSD and RAM Disk. ``` $ cat storage.config /dev/disk/by-path/pci-0000:03:00.0-sas-0x3009865483c90bf1-lun-0 volume=1 /dev/disk/by-path/pci-0000:03:00.0-sas-0x3009865483c90bf2-lun-0 volume=1 /dev/disk/by-path/pci-0000:03:00.0-sas-0x3009865483c90bf3-lun-0 volume=1 /dev/ram0 volume=2 $...

What are the corner cases to consider? If the origin says that an object no longer exists during revalidation, when would we want to keep serving old content in cache?

what happens if you try `curl -I http://www.google.com/ -H "token: abc" --connect-to ::127.0.0.1:8080` (eg, it looks like curl is trying the CONNECT method, but you want it to use GET)

In a pure ATS front and back, the front side would use [strategies.yaml](https://docs.trafficserver.apache.org/admin-guide/files/strategies.yaml.en.html), either with the round robin (from the beginning part of the description) or consistent hash policy (from...

I can't imagine that the version of ATS would matter here. The browser has security rules around Cross Site scripting attacks so you'd need to put CORS solutions in place:...

In your header_rewrite, you use `cond %{SEND_REQUEST_HDR_HOOK}`. To act at the time of remap, you'd need to use `REMAP_PSEUDO_HOOK` https://docs.trafficserver.apache.org/en/latest/admin-guide/plugins/header_rewrite.en.html#hook-conditions The cachekey plugin definitely still works, and definitely happens before...

Probably https://docs.trafficserver.apache.org/developer-guide/cache-architecture/architecture.en.html would be what you are looking for. > The docs of ATS does not introduce how the disk cache admits and evicts objects. - Think of the disk...

could you show the response headers both from origin and from ats? eg, ``` curl -sD- -o/dev/null "http://127.0.0.1:9000/1" curl -sD- -o/dev/null "http://$origin/1" ```

Curls’ -D (dump headers) needs a dash after to display on screen. I’d start with adding cache headers on the origin— Cache-Control or Expires.

FWIW, we follow the same conventions (dual algorithms, single file for private key/certs etc), but don't get such logs. I wonder if you actually do have a real issue, and...