proxy cache configuration from prod

Author: krokicki

docker/include/proxy_cache.conf

@@ -0,0 +1,21 @@
+proxy_cache mycache;
+
+proxy_cache_valid 200 302 15m;
+proxy_cache_valid 404     1m;
+
+# GET and HEAD are cached by default
+proxy_cache_methods GET HEAD;
+
+# Do not convert HEAD into GET
+proxy_cache_convert_head off;
+
+# Since head conversion is disabled, the request_method is included in the proxy_cache_key
+proxy_cache_key  "$scheme$proxy_host$request_method$request_uri$is_args$args";
+
+# Lock the cache so that only one request can populate it at a time
+proxy_cache_lock    on;
+proxy_cache_revalidate on;
+
+# Set back a nice HTTP Header to indicate what the cache status was
+add_header X-Proxy-Cache $upstream_cache_status;
+

docker/include/proxy_pass.conf

@@ -1,12 +1,8 @@
 proxy_pass http://x2s3;
 proxy_redirect off;
-
 proxy_http_version 1.1;
 proxy_set_header "Connection" "";
 
-proxy_cache mycache;
-add_header X-Proxy-Cache $upstream_cache_status;
-
 proxy_set_header Host $http_host;
 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 proxy_set_header X-Forwarded-Proto $scheme;

docker/nginx.conf

@@ -9,39 +9,43 @@ events {
 }
 
 http {
-    #
-    # Uncomment the lines below to enable response caching
-    #
-    #proxy_cache_path /var/cache/nginx keys_zone=mycache:10m max_size=50g levels=1:2 inactive=1h;
-    #proxy_cache_valid 200 302 15m;
-    #proxy_cache_valid 404     1m;
-    #map $http_cache_control $cache_bypass {
-    #    no-cache   1;
-    #}
-    #proxy_cache_bypass $cache_bypass;
+    proxy_cache_path /var/cache/nginx keys_zone=mycache:512m max_size=100g levels=1:2 inactive=1h
+                     loader_sleep=10ms manager_files=4000 manager_threshold=200m manager_sleep=100ms;
+    map $http_cache_control $cache_bypass {
+        no-cache   1;
+    }
+    proxy_cache_bypass $cache_bypass;
+    # Don’t create a temp file if body > 100 MB
+    proxy_max_temp_file_size 100m;
 
     # Only return Nginx in server header
     server_tokens off;
 
     server {
-        server_name _;
+        server_name s3.janelia.org;
         listen 443 ssl default_server;
         listen [::]:443 ssl;
         http2 on;
 
         # SSL config
-        ssl_certificate /certs/cert.crt;
-        ssl_certificate_key /certs/cert.key;
+        ssl_certificate /certs/wildcard.janelia.org/cert.crt;
+        ssl_certificate_key /certs/wildcard.janelia.org/cert.key;
         include /etc/nginx/conf/ssl.conf;
 
+        location = / {
+            include /etc/nginx/conf/proxy_cache.conf;
+            include /etc/nginx/conf/proxy_pass.conf;
+        }
+
         location / {
+            include /etc/nginx/conf/proxy_cache.conf;
             include /etc/nginx/conf/proxy_pass.conf;
         }
     }
 
     upstream x2s3 {
         zone upstreams 64K;
         server x2s3:8000;
-        keepalive 2;
+        keepalive 3;
     }
 }