Received: from mail-vk1-f190.google.com ([209.85.221.190]:54388) by stodi.digitalkingdom.org with esmtps (TLSv1.3:TLS_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1izbuw-0001g1-GF for lojban-list-archive@lojban.org; Wed, 05 Feb 2020 23:49:45 -0800 Received: by mail-vk1-f190.google.com with SMTP id e22sf1668510vke.21 for ; Wed, 05 Feb 2020 23:49:42 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1580975376; cv=pass; d=google.com; s=arc-20160816; b=qoDFQjkoFd0iOQm2PJglBGZHmBic/E/JdPi/WZ0OurJ0q75cm7wAF8Sc1Plbdp9JHh 7RF8vP/xTCBgO97F7k2wDuSok+/brfovB6RLwplXnLz/suYR7QnrfPuZbiQZ/kCurG4d 6G5QtOXlR6yGI4jr0VMnR7dv5u/0GN2tMWD/I/fFXw6ELcpMKdK6sZgKKAw4/n0P7ocq 5gThlaUxXQ1ETPpS/rAYBgQKrK3VKbTm50BeUBAoVDNxsaEhguPsQ2kp/NbxwlYbsZ+0 hMeysbtsDUoQI9kcPGVT2GYP5fi6bNNWif8dJrEhnTdUku9mdYEi00cUWR8wiY+fIS2G xHHg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:user-agent:in-reply-to :content-disposition:mime-version:references:mail-followup-to :message-id:subject:to:from:date:sender:dkim-signature; bh=CFSz1YckA1xQEEzLQq+tMX6uaWMWsGn6ON6wojTHkmE=; b=qk3pxkYM9YmjlTHFootuqvaRQCvxwG2KCqi29iuXQxCgSdssjRbv8D1+QdwiTkK9LV l9dLdI1r+AzHYTgBUvmEaVKGaqHyIZyILN9WRbwDoZP+Kqld7GM9d7x10EVGq10PaRSE WCndBAkDbgmbmB8T4FOJ2qbnDgsqUmZkubG7gLCMgung00TleHMwydnJHWjecHxXi/7K EFHvt1Xt0t0iM9rV2UXF/p2Ws0gNWW7+A56PkeijQfDp4SgD7J0ZSQaG6gmuVbzb0Jfz m5E4oNhUdSCT826ApzpxYyCVjKG6b7E3MP2juHJ9fK7aYH5YUnk6UWTiqTCrM8bwCGjI MFhg== ARC-Authentication-Results: i=2; gmr-mx.google.com; spf=pass (google.com: best guess record for domain of rlpowell@digitalkingdom.org designates 173.13.139.236 as permitted sender) smtp.mailfrom=rlpowell@digitalkingdom.org DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20161025; h=sender:date:from:to:subject:message-id:mail-followup-to:references :mime-version:content-disposition:in-reply-to:user-agent :x-original-sender:x-original-authentication-results:reply-to :precedence:mailing-list:list-id:list-post:list-help:list-archive :list-subscribe:list-unsubscribe; bh=CFSz1YckA1xQEEzLQq+tMX6uaWMWsGn6ON6wojTHkmE=; b=kcHWmhZjAbeCS4U04kyxOlu8WU5z9aZaadDotV7Q1rYL0eQQ1e+IX5/BSjW0s1+cuD JBFFj9y6U6eFde6Ifvz9MYTtv5Ly8ojLUkDdEBgiQv2a4Edh7keUEm8f7prM00pzHR33 CiulkUnfTa2NvDGp9lZkLKRaBQ9eYKAevPsDAubBbS+DGs/jtPr7SZDvAcLlzPtEO/Gg 4rI4WADNymHcY6uz4XXIisEysLxqDtsD6wwpg8S1hSgb3u8B/bpHSy7Rwf0ItAHeVVBU xEtIWSBtOgsVMw5WzqOozRQHOS6qbeJtd5aGZ53jmCOoVAk1DEICdMOUKsAj+ky05qyz YaeQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=sender:x-gm-message-state:date:from:to:subject:message-id :mail-followup-to:references:mime-version:content-disposition :in-reply-to:user-agent:x-original-sender :x-original-authentication-results:reply-to:precedence:mailing-list :list-id:x-spam-checked-in-group:list-post:list-help:list-archive :list-subscribe:list-unsubscribe; bh=CFSz1YckA1xQEEzLQq+tMX6uaWMWsGn6ON6wojTHkmE=; b=Xsd1PS5RAUqeHmta2U8DQfwl2xnSvAt2dhf8AHgDh2v9R7MlBNdMIC1i4mTMcksQws WBl3zSPLAFqFZxkGX5cFRDdlrH/jtCPoJ7tevgsXQ1S0jDTD2XvQ6swcDCI2gerqHA5r 7wRLzUdztijlXu9G+7duZ7Tosz9sFLNauoK6CP1CA2hN2RpoAmJQ+LqoyDZF9GDFfkje aFBN/PpJ1NSwbIR1eQ6NKWA7qR+wgfpeSMpgOeFtW0I3ALFF/Y7Ov5Ihv40ZK5MeCmz5 sLCpVZlXoScpsSdKugPxPQxLNvJy5h0ZgQwZA2rxK6VJNlCRmau9f8tNxqXUCWR5sijW Wv+A== Sender: lojban@googlegroups.com X-Gm-Message-State: APjAAAWObQYsH49IwMK7mxRqWwy+0Ux0ZZuF547JKeqN2sksRdZ2bKlR u3FeF3BIDUZ3itJlPvZG/DE= X-Google-Smtp-Source: APXvYqyJGGo2fW6vkBbSysQWkYvGSKKOi70hqgOhr8bJD1HXz9tBC79TgIEY31zlyV55l/XRfoJYGQ== X-Received: by 2002:a1f:e784:: with SMTP id e126mr1113423vkh.102.1580975376176; Wed, 05 Feb 2020 23:49:36 -0800 (PST) X-BeenThere: lojban@googlegroups.com Received: by 2002:a9f:3752:: with SMTP id a18ls417057uae.7.gmail; Wed, 05 Feb 2020 23:49:35 -0800 (PST) X-Received: by 2002:ab0:634c:: with SMTP id f12mr962925uap.48.1580975375517; Wed, 05 Feb 2020 23:49:35 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1580975375; cv=none; d=google.com; s=arc-20160816; b=AVUH66CmmxbrQiEkswhZDUCzVo7iSlozLWg3DblknnF+Lywhe9aS68I+y+B3GiZNEj mZA4Y8SH9YU8d3ZYt4ICCEhqZAJf5uZcOOFe4g9Der70UX7COFPMNZz6QtsdjUauQi5I JD0r3rz/y75/d5ugz5udPvDyNMfqtBmFUTAguit3d+ibVLdzko3ioVUBYs6Ep0Y3XA1N 4V1/xCiWP5Re37Opu/BRQpgUeJb8PeYY361q+ZurTzW6GRYrVvCN4QjSdgZQqPr/LiUp y4DFnf7HOj5MV9gPAo8bfs/GiZyGvHRVKTRg7eO09LgJ21NOlPxAtWsMwPWY8ILTgzNY Wo6g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=user-agent:in-reply-to:content-disposition:mime-version:references :mail-followup-to:message-id:subject:to:from:date; bh=h5Yt57CKR/IxPUSc1gBIko3clTLhir0oZ3qARgmmq2k=; b=sWXusNe+pHdWNFO5jPWUXbyOdL2ttpYTFkRtN+wzOuFhyvqtLtLzQ19sPzAmjt0kWU 6liNbCpk21TZOYU7ZYFeELyceo7kGNZybWO7JQrsDsrNyLRrcMLZGAPGQLPweGp+A9Vx oqo2XT94qXSAKd5JHbFQjRv/fJFNOkw1Uofcz6qplSey7d0Q13iw4lHQTt9vvD3zPM1f W/F4YJpumujIJZMIwI9lSYX1l44KlF/eae9s1KyZiw4Y5Ia5ruadTrFuQiOIt7jgt4js jix4iNfl4ZXjayOcKngIP5n10hZ79sGLMFvvnqCln0bghFL5QUu+EG3ioBXtYffyYME3 XMPQ== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: best guess record for domain of rlpowell@digitalkingdom.org designates 173.13.139.236 as permitted sender) smtp.mailfrom=rlpowell@digitalkingdom.org Received: from stodi.digitalkingdom.org (mail.digitalkingdom.org. [173.13.139.236]) by gmr-mx.google.com with ESMTPS id i27si152247uat.1.2020.02.05.23.49.35 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 05 Feb 2020 23:49:35 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of rlpowell@digitalkingdom.org designates 173.13.139.236 as permitted sender) client-ip=173.13.139.236; Received: from rlpowell by stodi.digitalkingdom.org with local (Exim 4.92) (envelope-from ) id 1izbuo-0001fu-0U for lojban@googlegroups.com; Wed, 05 Feb 2020 23:49:34 -0800 Date: Wed, 5 Feb 2020 23:49:33 -0800 From: Robin Lee Powell To: lojban@googlegroups.com Subject: Re: [lojban] What's going with CloudFlare and caching and such. Message-ID: <20200206074933.GV26741@stodi.digitalkingdom.org> Mail-Followup-To: lojban@googlegroups.com References: <20200206062919.GU26741@stodi.digitalkingdom.org> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Disposition: inline In-Reply-To: <20200206062919.GU26741@stodi.digitalkingdom.org> User-Agent: Mutt/1.11.3 (2019-02-01) X-Original-Sender: rlpowell@digitalkingdom.org X-Original-Authentication-Results: gmr-mx.google.com; spf=pass (google.com: best guess record for domain of rlpowell@digitalkingdom.org designates 173.13.139.236 as permitted sender) smtp.mailfrom=rlpowell@digitalkingdom.org Reply-To: lojban@googlegroups.com Precedence: list Mailing-list: list lojban@googlegroups.com; contact lojban+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: lojban@googlegroups.com X-Google-Group-Id: 1004133512417 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Score: -2.8 (--) X-Spam_score: -2.8 X-Spam_score_int: -27 X-Spam_bar: -- On Wed, Feb 05, 2020 at 10:29:19PM -0800, Robin Lee Powell wrote: > Some of you have noticed problems with dynamic content on lojban.org > now that we've started using CloudFlare. I haven't been able to > figure out how to fix this, so here's what's going on; maybe > somebody else will have ideas. > > So the goal of CloudFlare, primarily, was to make it so that if my > server went down, the site would be basically fine. This we have > acheived. > > However, to do so, I had to use brute force. Here's our CloudFlare > page rules: > > *lojban.org/*&* Cache Level: Bypass > *lojban.org/*edit* Cache Level: Bypass > *lojban.org/*Special:* Cache Level: Bypass > *lojban.org/*Talk:* Cache Level: Bypass > *lojban.org/* Browser Cache TTL: 30 minutes, Always Online: On, Cache Level: Cache Everything, Edge Cache TTL: 2 hours, Origin Cache Control: Off > > That last one is a very large hammer that says "just cache the hell > out of everything". > > The reason I need that hammer is that mediawiki is returning > absurdly wrong caching headers. Here's an example that entirely > bypasses CloudFlare: > > $ curl -k -v -H 'Host: mw.lojban.org' -L https://jukni.lojban.org/papri/pronunciation 2>&1 | less > [snip] > < HTTP/1.1 200 OK > < Date: Thu, 06 Feb 2020 06:26:31 GMT > < Server: Apache/2.4.38 (Debian) > < X-Powered-By: PHP/7.3.14 > < X-Content-Type-Options: nosniff > < Content-language: en > < Vary: Accept-Encoding,Cookie > < Expires: Thu, 01 Jan 1970 00:00:00 GMT > < Cache-Control: private, must-revalidate, max-age=0 > > ^^ That. That Cache-Control line is absurd, and effectively > completely disableds CloudFlare. FWIW, I turned the test site on at , for example , http://mw-test.lojban.org/papri/Pronunciation (which is a very simple, static page). If you look at the headers there you'll see: < Cache-Control: no-cache, no-store, max-age=0, must-revalidate < Pragma: no-cache And below is the entire LocalSettings.php file for the test site; as you can see it's absurdly simple. So, again, I have no idea why mediawiki is saying not to cache the pages ever. Also, $wgUseSquid = true; makes no difference. - ------------ $ cat /var/www/mediawiki/LocalSettings.php | grep -v '^#'