Proxy cache example
[cache]
enabled = true
default_ttl_secs = 300
max_object_bytes = "32MiB"
status_header = "X-Cache-Status"
[cache.memory]
enabled = true
max_size_bytes = "256MiB"
[cache.disk]
enabled = true
path = "/var/cache/fluxheim/site"
max_size_bytes = "10GiB"
Cache backends
| Backend | Use it when |
|---|
memory | You need the fastest cache and can keep objects in RAM. |
disk | You need cache capacity that survives process restarts. |
tiered | You want memory for hot objects and disk for larger capacity. |
storage-bin | You expect high churn and want bounded disk allocation. |
encrypted disk | You need cache-at-rest protection for disk objects. |
Route cache policy
[[vhosts.routes]]
name = "assets"
path_prefix = "/assets/"
action = "proxy"
[vhosts.routes.proxy]
upstreams = ["127.0.0.1:3000"]
[vhosts.routes.cache]
enabled = true
status_ttls = { "200" = 3600, "404" = 60 }
content_types = ["text/css", "application/javascript", "image/*"]
extensions = ["css", "js", "png", "webp", "svg"]
include_query = false
stale_while_revalidate_secs = 30
stale_if_error_secs = 120
Advanced cache controls
| Control | Purpose |
|---|
lock | Collapse concurrent misses so one request fills the cache. |
range.slice | Cache fixed byte slices for large files and resumable downloads. |
peer_fill | Let one edge fill from another edge before using origin. |
origin_protection | Limit concurrent origin fills during high pressure. |
cache_purger | Clean stale disk entries in bounded batches. |
Use cache carefully
- Do not cache private user pages unless the route is explicitly safe.
- Keep cache keys bounded and predictable.
- Use purge or short TTLs when content changes often.
- Bypass on cookies, authorisation, preview headers, and unsafe query strings.