Jeremm's Blog

# Varnish 4
vcl 4.0;
# Backend par defaut
backend default {
        .host = "127.0.0.1";
        .port = "81";
        .connect_timeout = 1s;
        .first_byte_timeout = 30s;
        .probe = {
                .url = "/";  # ou .request = "GET / HTTP/1.1" "Host: blog.jeremm.fr" "Connection: close";
                .timeout  = 15s;
                .interval = 15s;
                .window    = 5;
                .threshold = 2;
        }
}
sub vcl_recv {
        # Defini le backend
        set req.backend_hint = default ;
        # Pipe directement au backend pour les requetes non HTTP
        if (req.method != "GET" &&
                req.method != "HEAD" &&
                req.method != "PUT" &&
                req.method != "POST" &&
                req.method != "TRACE" &&
                req.method != "OPTIONS" &&
                req.method != "DELETE") {
                return (pipe);
        }
        # Ne pas cacher pour les requetes HTTP qui ne sont pas des simples demandes GET 
        if (req.method != "GET" && req.method != "HEAD") {
                return (pass);
        }
        # Enleve les cookies sur les medias pour que le hash match tous les clients
        if (req.url ~ "\.(jpeg|jpg|png|gif|ico|swf|js|css|gz|rar|txt|bzip|pdf)(\?.*|)$" && req.url !~ "^/index.php?") {
                unset req.http.Cookie;
                return (hash);
        }
        # Ne pas cacher pour les parties avec authentification
        if (req.http.Authorization) {
                return (pass);
        }
        return (hash);
}
sub vcl_hash {
        hash_data(req.url);
        if (req.http.host) {
                hash_data(req.http.host);
        } else {
                hash_data(server.ip);
        }
        if (req.http.Cookie) {
                hash_data(req.http.Cookie);
        }
        return(lookup);
}
sub vcl_pass {
        set req.http.X-marker = "pass" ;
}
sub vcl_backend_response {
        # Gzip tous les objets
        if ( ! beresp.http.Content-Encoding ~ "gzip" ) {
                set beresp.do_gzip = true;
        }
        # Efface le set-cookie sur les medias
        if (bereq.url ~ "\.(jpeg|jpg|png|gif|ico|swf|js|css|gz|rar|txt|bzip|pdf)(\?.*|)$" && bereq.url !~ "^/index.php?") {
                unset beresp.http.set-cookie;
        }
        # Cache les redirections et ne cache pas les 404
        if (beresp.ttl > 0s ) {
                if (beresp.status >= 300 && beresp.status <= 399) {
                        set beresp.ttl = 10m;
                }
                if (beresp.status >= 399) {
                        set beresp.ttl = 0s;
                }
        }
        # Efface le set-cookie sur les 404 & Cie
        if (beresp.status >= 399) {
                unset beresp.http.set-cookie;
        }
        # Maximum 24h de cache
        if (beresp.ttl > 86400s) {
                set beresp.ttl = 86400s;
        }
        # Marqueur pour l'entete HTTP de la reponse
        if (bereq.http.X-marker == "pass" ) {
                unset bereq.http.X-marker;
                set beresp.http.X-marker = "pass";
                set beresp.ttl = 0s ;
        }
        # Ne pas cacher si il y a encore un set-cookie
        if (beresp.ttl > 0s && beresp.http.set-cookie) {
                set beresp.ttl = 0s ;
        }
}
sub vcl_deliver {
        # Ajout et nettoyage de l'entete HTTP de la reponse
        if (obj.hits > 0){
                set resp.http.X-Varnish-Cache = "HIT";
        } else {
                set resp.http.X-Varnish-Cache = "MISS";
        }
        if (resp.http.X-marker == "pass" ) {
                unset resp.http.X-marker;
                set resp.http.X-Varnish-Cache = "PASS";
        }
        unset resp.http.Via;
        unset resp.http.X-Varnish;
        unset resp.http.Server;
        unset resp.http.X-Powered-By;
}
sub vcl_synth {
        if (resp.status >= 500 && req.restarts < 4) {
                return (restart);
        }
}