> ## Documentation Index
> Fetch the complete documentation index at: https://docs.safesquid.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Cache settings

<Note>
  CLI man page: `safesquid-cache(5)`
</Note>

The **Cache** section (`safesquid-cache(5)`) controls in-memory HTTP caching, refresh policy, and ICP parameters for forwarding.

## Core mechanics

### Refresh — first match wins

Walk Refresh rows top-down; first enabled row whose profiles match sets min/max age, validate, and cachable flag, then stops. `cachable=FALSE` sets `CACHE_INVALID` unless `CACHE_FORCE`.

### Disk store hard-disabled

Disk store selection is inactive — new objects are memory-only regardless of Store row configuration.

### Violate RFC

Objects stored despite `no-cache` / `no-store` get `CACHE_VIOLATION`. When **Violate RFC** is off, reads return NULL (not served). When on, violation objects may be served.

<Frame caption="Cache read path">
  <img src="https://mintcdn.com/safe-squid-labs-12a0916f/VRx-_vpMam8ezhZz/images/admin_guide/caching_flowchart.svg?fit=max&auto=format&n=VRx-_vpMam8ezhZz&q=85&s=71a71b8579f8bbe136f7c241e23d5feb" alt="Cache open flow" width="480" height="320" data-path="images/admin_guide/caching_flowchart.svg" />
</Frame>

## Examples

<Tip>
  ### Uncachable profile on top

  **Config:** Refresh row 1 profiles `uncachable`, cachable off; row 2 blank profiles, cachable on.

  **Result:** Tagged connections get CACHE\_INVALID on new entries; others use row 2 ages.
</Tip>

<Tip>
  ### Violate RFC off

  **Config:** violaterfc false; stored no-store object.

  **Result:** Second client does not receive object from cache — miss to origin.
</Tip>

<Tip>
  ### Store row present

  **Config:** Store enabled with path and quota.

  **Result:** select\_store still NULL — memory-only in current builds.
</Tip>

## How to verify

1. Enable CACHE in `LOG_LEVEL`.
2. Repeat URL request; check Detailed logs for hit/miss.
3. Use Manage cached objects to inspect or purge entries.


## Related topics

- [SafeSquid daemon](/admin_guide/start_here/daemon.md)
- [Import Certificate into Chrome or Internet Explorer](/use_cases/ssl_inspection/import_certificate_chrome_ie.md)
- [Application-Specific Configuration](/getting_started/client_configuration/application_specific_configuration.md)
- [Startup Parameters](/use_cases/customisation/startup_parameters.md)
- [Network settings](/admin_guide/infrastructure_and_access/network_settings.md)