I have a couple of queries related to Cache-Control.
If I specify Cache-Control max-age=3600, must-revalidate
for a static html/js/images/css file, with Last Modified Header defined in HTTP header:
Does browser/proxy cache(like Squid/Akamai) go all the way to origin server to validate before max-age expires? Or will it serve content from cache till max-age expires? After max-age expiry (that is expiry from cache), is there a If-Modified-Since check or is content re-downloaded from origin server w/o If-Modified-Since check?
a) If the server includes this header:
Cache-Control "max-age=3600, must-revalidate"
it is telling both client caches and proxy caches that once the content is stale (older than 3600 seconds) they must revalidate at the origin server before they can serve the content. This should be the default behavior of caching systems, but the must-revalidate
directive makes this requirement unambiguous.
b) The client should revalidate. It might revalidate using the If-Match
or If-None-Match
headers with an ETag, or it might use the If-Modified-Since
or If-Unmodified-Since
headers with a date.
a. Look at the ‘Stats’ tab on this page and see what happens.
b. After expiration the browser will check at the server if the file is updated. If not, the server will respond with a 304 Not Modified
header and nothing is downloaded.
You can check this behaviour yourself by looking at the ‘Net’ panel in Firebug or similar tools. Just re-enter the URL in the address bar and compare the number of HTTP requests with the number of requests when your cache is empty.
The given answers are incorrect, at least for web browsers in 2019.
"After expiration the browser will check at the server if the file is updated" <- not true
I have a static file served with "Cache-Control: public,must-revalidate,max-age=864000" and both Chrome and Firefox do a request every time (and get a 304 Not Modified back every time).
must-revalidate
"Indicates that once a resource becomes stale, caches must not use their stale copy without successful validation on the origin server."
must-revalidate
to the caching policy of a specific file that previously only had max-age
set. The problem was that the browser had retained the old If-Modified-Since
value from a previous request so was always checking the resource and getting a 304 response. After clearing my cache the new policy was applied and now the file is served directly from memory/disk cache as expected.
Success story sharing