feat: use trafficserver as cache server

Dockerfile

@@ -1,4 +1,5 @@
-FROM nvcr.io/nvidia/pytorch:23.10-py3
+# FROM nvcr.io/nvidia/pytorch:23.10-py3
+FROM ubuntu:20.04
 
 RUN apt update && apt install software-properties-common -y
 RUN add-apt-repository ppa:deadsnakes/ppa -y
@@ -13,6 +14,12 @@ RUN poetry env use /usr/bin/python3.11
 RUN poetry install
 RUN poetry run playwright install firefox && poetry run playwright install-deps
 
-COPY . /app
+RUN apt install -y trafficserver
+COPY trafficserver_config/*.config /etc/trafficserver/
+COPY trafficserver_config/ssl /etc/trafficserver/ssl
+RUN chown -R trafficserver:trafficserver /etc/trafficserver
+COPY trafficserver_config/ssl/canva.com.crt /usr/local/share/ca-certificates/canva.com.crt
+RUN update-ca-certificates
+COPY dns_records.sh .
 
-CMD /bin/sh
+CMD su - root -c "sh /app/dns_records.sh" && /etc/init.d/trafficserver start && /bin/bash

dns_records.sh

@@ -0,0 +1,2 @@
+echo "127.0.0.1 font-public.canva.com
+127.0.0.1 media-public.canva.com" >> /etc/hosts

trafficserver_config/cache.config

@@ -0,0 +1,57 @@
+#
+# cache.config
+#
+# Documentation:
+#    https://docs.trafficserver.apache.org/en/latest/admin-guide/files/cache.config.en.html
+#
+# The purpose of this file is to alter caching parameters of
+#   specific objects or sets of objects
+#
+# Each line consists of a set of tag value pairs.  The pairs
+#   are in the format  <tag>=<value>
+#
+# Each line must include exactly one primary specifier
+#
+#   Primary destination specifiers are
+#     dest_domain=
+#     dest_host=
+#     dest_ip=
+#     url_regex=
+#
+#
+# Lines may include any number of the secondary specifiers but
+#    secondary specifiers may not be duplicated on the same line
+#
+#   Secondary specifiers are
+#     port=
+#     scheme=
+#     prefix=
+#     suffix=
+#     method=
+#     time=
+#     src_ip=
+#     internal={true,false}
+#
+# Each line must include exactly one cache directive
+#   Cache directives are
+#     action=never-cache
+#     action=ignore-no-cache          (client & server no cache)
+#     action=ignore-client-no-cache   (only client no cache)
+#     action=ignore-server-no-cache   (only server no cache)
+#     pin-in-cache=<time>
+#     revalidate=<time>
+#     ttl-in-cache=<time>             (force caching and expire after <time>)
+#
+# Each line may also contain various "tweaks" which adjust caching parameters.
+#   Tweaks are
+#     cache-responses-to-cookies=<value>
+#       - Change the style of caching with regard to cookies. This effectively
+#         overrides the configuration parameter
+#           proxy.config.http.cache.cache_responses_to_cookies
+#         and uses the same values with the same semantics. The override happens
+#         only for requests that match.
+#
+# Examples
+#
+#  Revalidate all http objects from www.example.com after 2 hours
+#    dest_domain=www.example.com   scheme=http  revalidate=2h

trafficserver_config/records.config

@@ -0,0 +1,183 @@
+##############################################################################
+# *NOTE*: All options covered in this file should be documented in the docs:
+#
+#    https://docs.trafficserver.apache.org/records.config
+##############################################################################
+
+##############################################################################
+# Thread configurations. Docs:
+#    https://docs.trafficserver.apache.org/records.config#thread-variables
+##############################################################################
+CONFIG proxy.config.exec_thread.autoconfig INT 1
+CONFIG proxy.config.exec_thread.autoconfig.scale FLOAT 1.5
+CONFIG proxy.config.exec_thread.limit INT 2
+CONFIG proxy.config.accept_threads INT 1
+CONFIG proxy.config.task_threads INT 2
+CONFIG proxy.config.cache.threads_per_disk INT 8
+CONFIG proxy.config.exec_thread.affinity INT 1
+
+##############################################################################
+# Specify server addresses and ports to bind for HTTP and HTTPS. Docs:
+#    https://docs.trafficserver.apache.org/records.config#proxy.config.http.server_ports
+##############################################################################
+CONFIG proxy.config.http.server_ports STRING 443:ssl
+
+##############################################################################
+# Via: headers. Docs:
+#     https://docs.trafficserver.apache.org/records.config#proxy-config-http-insert-response-via-str
+##############################################################################
+CONFIG proxy.config.http.insert_request_via_str INT 1
+CONFIG proxy.config.http.insert_response_via_str INT 0
+
+##############################################################################
+# Parent proxy configuration, in addition to these settings also see parent.config. Docs:
+#    https://docs.trafficserver.apache.org/records.config#parent-proxy-configuration
+#    https://docs.trafficserver.apache.org/en/latest/admin-guide/files/parent.config.en.html
+##############################################################################
+CONFIG proxy.config.http.parent_proxy_routing_enable INT 0
+CONFIG proxy.config.http.parent_proxy.retry_time INT 300
+CONFIG proxy.config.http.parent_proxy.connect_attempts_timeout INT 30
+CONFIG proxy.config.http.forward.proxy_auth_to_parent INT 0
+CONFIG proxy.config.http.uncacheable_requests_bypass_parent INT 1
+
+##############################################################################
+# HTTP connection timeouts (secs). Docs:
+#    https://docs.trafficserver.apache.org/records.config#http-connection-timeouts
+##############################################################################
+CONFIG proxy.config.http.keep_alive_no_activity_timeout_in INT 120
+CONFIG proxy.config.http.keep_alive_no_activity_timeout_out INT 120
+CONFIG proxy.config.http.transaction_no_activity_timeout_in INT 30
+CONFIG proxy.config.http.transaction_no_activity_timeout_out INT 30
+CONFIG proxy.config.http.transaction_active_timeout_in INT 900
+CONFIG proxy.config.http.transaction_active_timeout_out INT 0
+CONFIG proxy.config.http.accept_no_activity_timeout INT 120
+CONFIG proxy.config.net.default_inactivity_timeout INT 86400
+
+##############################################################################
+# Origin server connect attempts. Docs:
+#    https://docs.trafficserver.apache.org/records.config#origin-server-connect-attempts
+##############################################################################
+CONFIG proxy.config.http.connect_attempts_max_retries INT 3
+CONFIG proxy.config.http.connect_attempts_max_retries_dead_server INT 1
+CONFIG proxy.config.http.connect_attempts_rr_retries INT 3
+CONFIG proxy.config.http.connect_attempts_timeout INT 30
+CONFIG proxy.config.http.post_connect_attempts_timeout INT 1800
+CONFIG proxy.config.http.down_server.cache_time INT 60
+CONFIG proxy.config.http.down_server.abort_threshold INT 10
+
+##############################################################################
+# Negative response caching, for redirects and errors. Docs:
+#    https://docs.trafficserver.apache.org/records.config#negative-response-caching
+##############################################################################
+CONFIG proxy.config.http.negative_caching_enabled INT 0
+CONFIG proxy.config.http.negative_caching_lifetime INT 1800
+
+##############################################################################
+# Proxy users variables. Docs:
+#    https://docs.trafficserver.apache.org/records.config#proxy-user-variables
+##############################################################################
+CONFIG proxy.config.http.insert_client_ip INT 1
+CONFIG proxy.config.http.insert_squid_x_forwarded_for INT 1
+
+##############################################################################
+# Security. Docs:
+#    https://docs.trafficserver.apache.org/records.config#security
+##############################################################################
+CONFIG proxy.config.http.push_method_enabled INT 0
+
+##############################################################################
+# Enable / disable HTTP caching. Useful for testing, but also as an
+# overridable (per remap) config
+##############################################################################
+CONFIG proxy.config.http.cache.http INT 1
+
+##############################################################################
+# Cache control. Docs:
+#    https://docs.trafficserver.apache.org/records.config#cache-control
+#    https://docs.trafficserver.apache.org/en/latest/admin-guide/files/cache.config.en.html
+##############################################################################
+CONFIG proxy.config.http.cache.ignore_client_cc_max_age INT 1
+CONFIG proxy.config.http.normalize_ae INT 1
+CONFIG proxy.config.http.cache.cache_responses_to_cookies INT 1
+CONFIG proxy.config.http.cache.cache_urls_that_look_dynamic INT 1
+    # https://docs.trafficserver.apache.org/records.config#proxy-config-http-cache-when-to-revalidate
+CONFIG proxy.config.http.cache.when_to_revalidate INT 0
+    # https://docs.trafficserver.apache.org/records.config#proxy-config-http-cache-required-headers
+CONFIG proxy.config.http.cache.required_headers INT 2
+
+##############################################################################
+# Heuristic cache expiration. Docs:
+#    https://docs.trafficserver.apache.org/records.config#heuristic-expiration
+##############################################################################
+CONFIG proxy.config.http.cache.heuristic_min_lifetime INT 3600
+CONFIG proxy.config.http.cache.heuristic_max_lifetime INT 86400
+CONFIG proxy.config.http.cache.heuristic_lm_factor FLOAT 0.10
+
+##############################################################################
+# Network. Docs:
+#    https://docs.trafficserver.apache.org/records.config#network
+##############################################################################
+CONFIG proxy.config.net.connections_throttle INT 30000
+CONFIG proxy.config.net.max_connections_in INT 30000
+CONFIG proxy.config.net.max_connections_active_in INT 10000
+
+##############################################################################
+# RAM and disk cache configurations. Docs:
+#    https://docs.trafficserver.apache.org/records.config#ram-cache
+#    https://docs.trafficserver.apache.org/en/latest/admin-guide/files/storage.config.en.html
+##############################################################################
+CONFIG proxy.config.cache.ram_cache.size INT -1
+CONFIG proxy.config.cache.ram_cache_cutoff INT 4194304
+    # https://docs.trafficserver.apache.org/records.config#proxy-config-cache-limits-http-max-alts
+CONFIG proxy.config.cache.limits.http.max_alts INT 5
+    # https://docs.trafficserver.apache.org/records.config#proxy-config-cache-max-doc-size
+CONFIG proxy.config.cache.max_doc_size INT 0
+CONFIG proxy.config.cache.min_average_object_size INT 8000
+
+##############################################################################
+# Logging Config. Docs:
+#    https://docs.trafficserver.apache.org/records.config#logging-configuration
+#    https://docs.trafficserver.apache.org/en/latest/admin-guide/files/logging.yaml.en.html
+##############################################################################
+CONFIG proxy.config.log.logging_enabled INT 3
+CONFIG proxy.config.log.max_space_mb_for_logs INT 2000
+CONFIG proxy.config.log.max_space_mb_headroom INT 1000
+CONFIG proxy.config.log.rolling_enabled INT 1
+CONFIG proxy.config.log.rolling_interval_sec INT 86400
+CONFIG proxy.config.log.rolling_size_mb INT 10
+CONFIG proxy.config.log.auto_delete_rolled_files INT 1
+CONFIG proxy.config.log.periodic_tasks_interval INT 5
+
+##############################################################################
+# These settings control remapping, and if the proxy allows (open) forward proxy or not. Docs:
+#    https://docs.trafficserver.apache.org/records.config#url-remap-rules
+#    https://docs.trafficserver.apache.org/en/latest/admin-guide/files/remap.config.en.html
+##############################################################################
+CONFIG proxy.config.url_remap.remap_required INT 0
+    # https://docs.trafficserver.apache.org/records.config#proxy-config-url-remap-pristine-host-hdr
+CONFIG proxy.config.url_remap.pristine_host_hdr INT 0
+    # https://docs.trafficserver.apache.org/records.config#reverse-proxy
+CONFIG proxy.config.reverse_proxy.enabled INT 0
+
+##############################################################################
+# SSL Termination. Docs:
+#    https://docs.trafficserver.apache.org/records.config#client-related-configuration
+#    https://docs.trafficserver.apache.org/en/latest/admin-guide/files/ssl_multicert.config.en.html
+##############################################################################
+CONFIG proxy.config.ssl.client.verify.server INT 0
+CONFIG proxy.config.ssl.client.CA.cert.filename STRING NULL
+CONFIG proxy.config.ssl.server.cipher_suite STRING ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
+CONFIG proxy.config.ssl.server.cert.path STRING /etc/trafficserver/ssl/
+CONFIG proxy.config.ssl.server.private_key.path STRING /etc/trafficserver/ssl/
+CONFIG proxy.config.ssl.enabled INT 1
+
+##############################################################################
+# Debugging. Docs:
+#    https://docs.trafficserver.apache.org/records.config#diagnostic-logging-configuration
+##############################################################################
+CONFIG proxy.config.diags.debug.enabled INT 0
+CONFIG proxy.config.diags.debug.tags STRING http|dns
+# ToDo: Undocumented
+CONFIG proxy.config.dump_mem_info_frequency INT 0
+CONFIG proxy.config.http.slow.log.threshold INT 0
+CONFIG proxy.config.admin.user_id STRING trafficserver

trafficserver_config/ssl/canva.com.crt

@@ -0,0 +1,32 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

trafficserver_config/ssl/canva.com.key

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

trafficserver_config/ssl_multicert.config

@@ -0,0 +1 @@
+dest_ip=* ssl_cert_name=canva.com.crt ssl_key_name=canva.com.key

trafficserver_config/storage.config

@@ -0,0 +1,53 @@
+#
+# storage.config - Storage Configuration file
+#
+# Documentation:
+#    https://docs.trafficserver.apache.org/en/latest/admin-guide/files/storage.config.en.html
+#
+# The storage configuration is a list of all the storage to
+# be used by the cache.
+#
+#
+#############################################################
+# Using a file for the cache storage
+#
+# <pathname> <size>
+#
+# Where 'pathname' is full path to the directory where you want
+# the cache-file to live and 'size' is size in bytes
+#
+# Example: 128MB cache file(/var/cache/trafficserver/cache.db)
+#      /var/cache/trafficserver 128M
+#
+# Example: 144MB cache file(/var/cache/trafficserver/cache.db)
+#          assuming prefix of '/usr'
+#      /var/cache/trafficserver 150994944
+#
+# Example: 512MB cache file(/var/cache/trafficserver/cache.db)
+#          assuming prefix of '/usr'
+#      /var/cache/trafficserver 512M
+#
+#
+#############################################################
+##              O_DIRECT Specific Configuration            ##
+#############################################################
+#
+# Examples: Using O_DIRECT on disks (Linux kernel >= 2.6.3,
+# FreeBSD > 5.3)
+#
+#      /dev/disc/by-id/[Insert_ID_Here_12345]         		# Linux
+#      /dev/disc/by-path/[Insert-Path-Here:12:34:56-1.0.0.0]	# Linux
+#
+#      /dev/ada1            					# FreeBSD
+#
+# Note that disks are identified by id or path. This is to prevent changes
+# by the kernel (which could occur if a disk was simply described as /dev/sda, sdb, etc.).
+#
+# Also note that when using these raw devices in O_DIRECT mode, you
+# do not need to specify the partition size. It's automatically
+# detected.
+#
+# A small default cache (256MB). This is set to allow for the regression test to succeed
+# most likely you'll want to use a larger cache. And, we definitely recommend the use
+# of raw devices for production caches.
+/var/cache/trafficserver 512M