Myth: Varnish is your all-in-one HTTPS cache

Myth: Varnish is your all-in-one HTTPS cache
This week in caching, the Varnish-does-everything myth:
— The assumption: drop Varnish in and it caches your encrypted traffic.
— The correction: open-source Varnish speaks no TLS. You terminate HTTPS in front (nginx/hitch) and re-encrypt to backend behind it, which means your VCL sees plaintext but your topology just gained two TLS hops people forget to tune.
— Worth your time: if you're on Varnish, audit where TLS terminates and whether keep-alive is on for the backend connection. That's where the latency hides.
Bookmark: Varnish caches HTTP brilliantly and HTTPS not at all. Plan the TLS sandwich before you blame the cache.