@whitequark FWIW I had a vaguely similar problem to solve recently for crates.io, and I ended up just using nginx with proxy_cache. As much as I usually prefer writing standalone services over cobbling together configs, for this particular case it seems to work fine.