Hi list, I'm having problems with squid (v3) and tomcat with caching of session_id/cookie generate on a URL ps: sorry about long post and poor english ;0( This is my squid.conf ################# SQUID.CONF (testing configuration) http_port 3128 hierarchy_stoplist cgi-bin \? acl QUERY urlpath_regex cgi-bin \? no_cache deny QUERY cache deny QUERY acl JSESSIONID1 req_header Cookie -i JSESSIONID cache deny JSESSIONID1 acl JSESSIONID2 rep_header Set-Cookie -i JSESSIONID cache deny JSESSIONID2 refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 ignore-no-cache ignore-no-store override-expire refresh_pattern -i mysite 0 0% 0 ignore-no-cache ignore-no-store override-expire refresh_pattern . 0 20% 4320 cache_access_log /var/log/squid/access.log cache_log /var/log/squid/cache.log cache_store_log /var/log/squid/store.log debug_options ALL,1 33,2 acl all src 0.0.0.0 acl localhost src 127.0.0.1 cache_effective_user squid cache_effective_group nogroup logfile_rotate 0 http_access allow all ####################################### I'm using de CURL (command line) on Linux to this test... When access mysite (http://mysite.com.br:8080/app) on the frist time (this is a Tomcat aplication, without any Apache on midleware) , the jsessionid code (Location) is equal to cookie (Set-Cookie) # curl -x localhost:3128 -I http://mysession:8080/app HTTP/1.0 302 Moved Temporarily Server: Apache-Coyote/1.1 Set-Cookie: JSESSIONID=950D366F1F13A7BA226E89C928060BAF.node1; Path=/app Expires: 15 Aug 2011 21:53:52 GMT Cache-Control: max-age=120 Location: http://mysite/session.do;jsessionid=950D366F1F13A7BA226E89C928060BAF.node1?app=portal Content-Type: text/html;charset=utf-8 Content-Length: 0 Date: Wed, 10 Aug 2011 21:53:52 GMT X-Cache: MISS from localhost X-Cache-Lookup: HIT from localhost:3128 Via: 1.0 localhost (squid/3.0.STABLE18) Proxy-Connection: keep-alive But on second acess, the session is cached (because max-age=120 parameter) This was not expected because the sessioind should change for each session (this is a dynamic page). See bellow: # curl -x localhost:3128 -I HTTP/1.0 302 Moved Temporarily Server: Apache-Coyote/1.1 Expires: 15 Aug 2011 21:53:52 GMT Cache-Control: max-age=120 Location: http://mysite/app/session.do;jsessionid=950D366F1F13A7BA226E89C928060BAF.node1?app=portal Content-Type: text/html;charset=utf-8 Content-Length: 0 Date: Wed, 10 Aug 2011 21:53:52 GMT Age: 1 X-Cache: HIT from localhost X-Cache-Lookup: HIT from localhost:3128 Via: 1.0 localhost (squid/3.0.STABLE18) Proxy-Connection: keep-alive With other proxy servers, this problem does not occur (I already tested with the Freeproxy and AnalogX and the result of jessession is always different from the previous session, even with max-age parameter) therefore, I believe that the problem occurs only when using the proxy-squid. # curl -x freeproxyserver:8080 -I http://mysession:8080/app HTTP/1.1 302 Moved Temporarily Server: Apache-Coyote/1.1 Set-Cookie: JSESSIONID=59F7E0C6E68988FC54DCD0C7F7902933.node1; Path=/app Expires: 15 Aug 2011 22:03:27 GMT Cache-Control: max-age=120 Location: http://mysite:8080/session.do;jsessionid=59F7E0C6E68988FC54DCD0C7F7902933.node1?app=portal Content-Type: text/html;charset=utf-8 Content-Length: 0 Date: Wed, 10 Aug 2011 22:03:27 GMT I don't have access to modify the Cache-Control in the web application and as in other proxy-server does not occur the error, I have to solve this issue in Squid. I already tried to enter the settings below, but not relieving effect to. The only solution that worked was set cache_deny for the entire site, but this is not desirable (for reasons of bandwidth consumption) ##E# I tried this configuration (but not effect) hierarchy_stoplist cgi-bin \? acl QUERY urlpath_regex cgi-bin \? no_cache deny QUERY cache deny QUERY acl JSESSIONID1 req_header Cookie -i JSESSIONID cache deny JSESSIONID1 acl JSESSIONID2 rep_header Set-Cookie -i JSESSIONID cache deny JSESSIONID2 refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 ignore-no-cache ignore-no-store override-expire refresh_pattern -i mysite 0 0% 0 ignore-no-cache ignore-no-store override-expire refresh_pattern . 0 20% 4320 ##### I appreciate any help