Guide - How to cache web content using pfSense 2.7.0
-
Here is my guide to caching web content for pfSense 2.7.0. While being far from a perfect solution this guide aims to give users a step in the right direction for caching content, note not all content is cacheable and things can change that could stop this method from working. As I find improvements I will update the guide.
Note for this guide we will be focusing on caching content worth caching (windows updates, steam game updates, epic games and program updates like nvidia drivers ) and not things like websites with dynamic web content.
In order to cache content correctly (such as windows updates and software updates from sites) there are a few things you need to do.
- Set up squid proxy, after that you can either manually set the proxy on each device for every user or use a WPAD (you can use the unofficial pfSense WPAD package https://github.com/marcelloc/Unofficial-pfSense-packages) and set each device to automatically discover a proxy this will help software (such as chrome) to be auto configured to the use proxy thus not needing to rely on the transparent proxy. You can use this basic WPAD config for stating
function FindProxyForURL(url, host)
{
return "PROXY 192.168.1.1:3128";
}
And use https://thorsen.pm/proxyforurl to debug your WPAD
To bypass a domain use
if (shExpMatch(host, "*.somedomain.com")) return "DIRECT";-
Set up squid to use the transparent proxy. Not all software can be configured to use the WPAD so the rest will rely on the transparent proxy, if you use the transparent proxy for everything you can have some sites break and have connection issues so it is best to configure the device to use proxy first, web browsers should not be using the transparent proxy set them to use the proxy.
-
Set up local cache use Cache Dynamic Content and use a Custom refresh_patterns and use this list
https://github.com/mmd123/squid-cache-dynamic_refresh-list
Note if you find improvements to the list you can create pull requests -
Set up squid SSL Man In the Middle Filtering, most sites are https these days, so you will need to enable this and set SSL/MITM Mode to Custom (we will come back to this later)
-
Make sure all user devices have the cert that you have used under CA install into the root directory of every device. If you do not install the cert you may get connection issues.
Now this is where a lot of users fall into the trap, they want to use SSL Man In the Middle for everything thinking they can decrypt every website to cache everything however this ends up breaking the internet. Now you could spend the rest of your life whitelisting addresses but with every changing aspect of the internet this is not feasible.
What you want to do is only decrypt addresses/domains that will not break things and is worth caching. An example of this would be windows updates, software updates or game updates. You want to decrypt domains that host the update files such as
.download.microsoft.com
.msedge.sf.dl.delivery.mp.microsoft.com
and not all the security checks domains that will cause windows updates to break.The best list I have found to get all download location domains is to use the the github project winget Package Manager Repository https://github.com/microsoft/winget-pkgs
This has a huge list of download domains that we can use.
You can aways add more domains to sites which you download from frequently. If you have 10 devices on your network and you use winget to update them then this can be a good cache use as the updates should be cacheable. If your users visit a site very often which has a lot of cacheable content and also does not break when using decryption you can add that domain.Going forward It would be good to create a community list of domains that do not break when you decrypt (will update if this changes).
To summarize you want to focus on caching content from download domains and not every service.
You need to create 2 files, use the bumpsites file that i uploaded
/home/bumpsites.txt
bumpsites.txt
/home/excludesites.txtuse the bumpsites that i provided for now
For excludesites.txt the following is an example of how to bypass domains (Ubisoft can break when using a proxy so we will add this to the bypass)
.ubi.com
.ubisoft.com
.ubisoft.org
.ubisoftconnect.comUnder Custom Options (SSL/MITM) add the following (you need to show advanced options)
acl step1 at_step SslBump1 #Decrypt that this step
acl monitoredSites ssl::server_name "/home/bumpsites.txt" #List of domains to bump
acl excludeSites ssl::server_name "/home/excludeSites.txt" #List of domains to exclude/splice
ssl_bump splice excludeSites # Splice the excluded sites
ssl_bump peek step1 #Peek so we can sill bump
ssl_bump bump monitoredSites # bump connections for monitoredSites
ssl_bump splice all # Splice connections for other sites (not bumped)once you have all this click save; TIP you can use
squid -k parse
in pfSense shell to check for errors in your squid config, make sure there are no error for your Custom Options (SSL/MITM) rulesNow we can setup a test for windows update caching, you can either just update your devices and watch for HIT in the squid logs or install a windows VM and save the state before updating the OS.
Download the windows updates, then once downloaded reload the state before the update. In the squid logs you should see results like theseDate IP Status Address User Destination 01.08.2023 11:42:54 192.168.1.216 TCP_HIT/200 http://download.windowsupdate.com/d/msdownload/update/software/defu/2023/07/am_base_4a98f56cf3729f1697ab1f815d06eb257a44547d.exe - - 01.08.2023 11:42:50 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/software/uprl/2023/07/windows-kb890830-x64-v5.115_416277f76215946bdd563fbf72b2c9df2eed1cef.exe - - 01.08.2023 11:42:46 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/software/secu/2017/05/windows10.0-kb4019474-x64-express_9fa26526ca08e7f1b78ac61430e29a2015870342.cab - - 01.08.2023 11:42:41 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/d/msdownload/update/software/defu/2023/07/am_delta_b2588d0b5c6ed35ee4f88fbb086a8f042bf224dc.exe - - 01.08.2023 11:42:41 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/d/msdownload/update/software/defu/2023/07/am_engine_3cc73d3c32ab49ae4a26940a22c9525695f66d86.exe - - 01.08.2023 11:42:41 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/software/crup/2020/11/windows10.0-kb4023814-x64_bdca3b87fc6fd109dd865e8e1346309d45cbf5f8.cab - - 01.08.2023 11:42:38 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/software/defu/2023/07/mpsigstub_36fee640c8a9a035ab570d59a2f01b6dda3f2712.exe - - 01.08.2023 11:42:37 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/d/msdownload/update/software/updt/2020/06/windows10.0-kb4480730-x64_286988057d78506fe5f978784d599e9bc778a925.cab - - 01.08.2023 11:42:37 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/software/crup/2018/04/windows10.0-kb4021701-v2-x64-express_ce096a72fca7310529093ca81cc00983462fba34.cab - - 01.08.2023 11:42:37 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/d/msdownload/update/software/crup/2016/06/windows10.0-kb3173427-x64-express_159d9916f459290dcad78c195a96ec6c52aa53b3.cab - - 01.08.2023 11:42:37 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/software/crup/2017/07/windows10.0-kb4033631-x64-express_fa00a38bc4d04262e7dda3dca974ecb08393414c.cab - - 01.08.2023 11:42:37 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/software/updt/2021/05/windows10.0-kb4023057-x64_58b2f8fd3da37d22fb99bd6aa6c3f69951e67429.cab - - 01.08.2023 11:42:36 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/d/msdownload/update/software/crup/2016/03/cleanupcu_a316cb71c39b3bde4c7057716634196343d601c9.exe - - 01.08.2023 11:42:36 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/software/crup/2018/06/windows10.0-kb4134662-x64-express_a6673ecae85edf46b211ba7e0a706f24730765aa.cab - - 01.08.2023 11:42:36 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/software/crup/2017/07/windows10.0-kb4033631-x64-express_fa00a38bc4d04262e7dda3dca974ecb08393414c.cab - - 01.08.2023 11:42:36 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/software/defu/2023/07/mpsigstub_36fee640c8a9a035ab570d59a2f01b6dda3f2712.exe - - 01.08.2023 11:42:36 192.168.1.216 TCP_HIT/200 http://download.windowsupdate.com/c/msdownload/update/software/uprl/2023/07/windows-kb890830-x64-v5.115_416277f76215946bdd563fbf72b2c9df2eed1cef.exe - - 01.08.2023 11:42:36 192.168.1.216 TCP_HIT/200 http://download.windowsupdate.com/c/msdownload/update/software/secu/2017/05/windows10.0-kb4019474-x64-express_9fa26526ca08e7f1b78ac61430e29a2015870342.cab - - 01.08.2023 11:42:36 192.168.1.216 TCP_HIT/200 http://download.windowsupdate.com/c/msdownload/update/software/crup/2020/11/windows10.0-kb4023814-x64_bdca3b87fc6fd109dd865e8e1346309d45cbf5f8.cab - - 01.08.2023 11:42:36 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/d/msdownload/update/software/updt/2016/07/windows10.0-kb3161102-x64_5d8bf62de2a4e651f8523d63589d0d2961bb2ad1.cab - - 01.08.2023 11:42:36 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/software/crup/2018/04/windows10.0-kb4021701-v2-x64-express_ce096a72fca7310529093ca81cc00983462fba34.cab - - 01.08.2023 11:42:36 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/d/msdownload/update/software/defu/2023/07/am_engine_3cc73d3c32ab49ae4a26940a22c9525695f66d86.exe - - 01.08.2023 11:42:36 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/d/msdownload/update/software/updt/2020/06/windows10.0-kb4480730-x64_286988057d78506fe5f978784d599e9bc778a925.cab - - 01.08.2023 11:42:36 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/d/msdownload/update/software/crup/2016/06/windows10.0-kb3173427-x64-express_159d9916f459290dcad78c195a96ec6c52aa53b3.cab - - 01.08.2023 11:42:36 192.168.1.216 TCP_HIT/200 http://download.windowsupdate.com/d/msdownload/update/software/defu/2023/07/am_delta_b2588d0b5c6ed35ee4f88fbb086a8f042bf224dc.exe - - 01.08.2023 11:42:36 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/d/msdownload/update/software/crup/2016/03/windows10.0-kb3125217-x64_94d4773d1e8fb9bfa8847627c71b9f4088d1fc5e.cab - - 01.08.2023 11:42:36 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/d/msdownload/update/software/crup/2018/03/windows10.0-kb4033631-v2-x64-express_f3efe57c2251a16739767ea3e1cc0f45f53242ae.cab - - 01.08.2023 11:42:36 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/software/crup/2018/01/kb4056254_d2fbd6b44a3f712afbf0c456e8afc24f3363d10b.cab - - 01.08.2023 11:42:36 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/software/crup/2018/01/kb4056254_d2fbd6b44a3f712afbf0c456e8afc24f3363d10b.cab - - 01.08.2023 11:42:36 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/d/msdownload/update/software/crup/2018/03/windows10.0-kb4033631-v2-x64-express_f3efe57c2251a16739767ea3e1cc0f45f53242ae.cab - - 01.08.2023 11:42:36 192.168.1.216 TCP_HIT/200 http://download.windowsupdate.com/c/msdownload/update/software/updt/2021/05/windows10.0-kb4023057-x64_58b2f8fd3da37d22fb99bd6aa6c3f69951e67429.cab - - 01.08.2023 11:42:36 192.168.1.216 TCP_HIT/200 http://download.windowsupdate.com/d/msdownload/update/software/defu/2023/07/am_base_4a98f56cf3729f1697ab1f815d06eb257a44547d.exe - - 01.08.2023 11:42:36 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/d/msdownload/update/software/crup/2016/03/windows10.0-kb3125217-x64_94d4773d1e8fb9bfa8847627c71b9f4088d1fc5e.cab - - 01.08.2023 11:42:36 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/d/msdownload/update/software/crup/2016/03/cleanupcu_a316cb71c39b3bde4c7057716634196343d601c9.exe - - 01.08.2023 11:42:36 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/software/crup/2018/06/windows10.0-kb4134662-x64-express_a6673ecae85edf46b211ba7e0a706f24730765aa.cab - - 01.08.2023 11:42:36 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/d/msdownload/update/software/updt/2016/07/windows10.0-kb3161102-x64_5d8bf62de2a4e651f8523d63589d0d2961bb2ad1.cab - - 01.08.2023 11:42:24 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501785_b63831d106ca9cff7145001e17507f5e2e98013d.cab - - 01.08.2023 11:42:24 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501668_548bcb3251224e35a56e9e2a042781da15af9b96.cab - - 01.08.2023 11:42:24 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501669_9e6705f208b296f70d73eecc95a403a4bf1aa7b0.cab - - 01.08.2023 11:42:24 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501705_7520ff2fd5e68d556ebcc8709e94fc8243c63811.cab - - 01.08.2023 11:42:24 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501706_03522649b049107e75b7e334863096c2adc6c600.cab - - 01.08.2023 11:42:24 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501707_9acd0c469d1d77fb096d49b5731bd2e85802173c.cab - - 01.08.2023 11:42:24 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501708_349f4bb60b1646d5f58c22ca197c0fb3435939da.cab - - 01.08.2023 11:42:24 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501709_b17af9a1fd47f21db5580ba66c97009154a8826d.cab - - 01.08.2023 11:42:24 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501710_468ad2ace632f7d4717df29ce4b530dda26a7538.cab - - 01.08.2023 11:42:24 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501711_614f464601ae26eeff0d8de8a4e81c0fe832ea5f.cab - - 01.08.2023 11:42:24 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501712_9101a0eb61abba2f986e4a44790108b555328dff.cab - - 01.08.2023 11:42:24 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501713_de7da4fc488974c86929ad8d4fef82f4c3929fc6.cab - - 01.08.2023 11:42:24 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501714_c90cbfa04866cfc55ae2b28290a78b042b0f10f5.cab - - 01.08.2023 11:42:24 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501715_ad88c5a9904819b6fa79689a8ee28aa90b099d5a.cab - - 01.08.2023 11:42:24 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501716_2cb364073eef9fce6ed9497a16a3b0d197c88444.cab - - 01.08.2023 11:42:24 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501717_19dcfc08677b7d133fe882f9184c16d89feae578.cab - - 01.08.2023 11:42:24 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501718_7dfdabd61c5b521a60adae2879452817b035388d.cab - - 01.08.2023 11:42:24 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501719_8fffc4d2f4289e1adcd27818e33d021f9478565e.cab - - 01.08.2023 11:42:24 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501720_7c3d21ff91d919e48a9ec78b77766a472e98dad1.cab - - 01.08.2023 11:42:24 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501721_ecd24e9afca57a36b71a3157286739f8f5900543.cab - - 01.08.2023 11:42:15 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501722_4efbb6a0a003d43a7b54a68b3e53d9ef82f6882c.cab - - 01.08.2023 11:42:15 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501723_0d9d419d50dafac58777813da28beecc33984c6d.cab - - 01.08.2023 11:42:15 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501724_5bba2e91371e33cd1ba6e0d1a52ebd3c8837c5ed.cab - - 01.08.2023 11:42:15 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501725_49c97f671a875b92ee20f4a791f8c930bf0e3bf8.cab - - 01.08.2023 11:42:15 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501726_d77fdccf58f6b05b39f097c96d42d70ffcc9411b.cab - - 01.08.2023 11:42:06 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501727_e96d52b6c6d0ba40e406f1993889d43675d1662f.cab - - 01.08.2023 11:42:06 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501728_d63c10f7561dc4fa7402d57fcb863fb56c4c3174.cab - - 01.08.2023 11:42:06 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501729_80d46628f23d347407fd023c64d275dce388160f.cab - - 01.08.2023 11:42:06 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501730_9c76525fb28faac1c26f477232e006e560ae0942.cab - - 01.08.2023 11:42:06 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501731_e678c8883b15a51065b9ffc03bb3fdf45225d4a9.cab - - 01.08.2023 11:42:06 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501732_42c08cbf1b83a34404da2eb755b9072d1edddf1e.cab - - 01.08.2023 11:42:06 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501733_c69ec1d8a580255eea509f1e97c7ac04399b58fc.cab - - 01.08.2023 11:42:06 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501734_83af4fd090bcbf01c6902ae8a4c3a9d6455c5fa2.cab - - 01.08.2023 11:42:06 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501735_21746ea281b266eb06ec8ef0e4401c454fdae9b6.cab - - 01.08.2023 11:42:06 192.168.1.216 TCP_MEM_HIT/200 http://download.windowsupdate.com/c/msdownload/update/others/2023/07/39501736_408b671c97faaba634cc1ca23e33ba3157871d83.cab - -
You can also test this by downloading the nvidia driver twice
01.08.2023 12:37:09 192.168.1.216 TCP_HIT/200 https://us.download.nvidia.com/Windows/536.67/536.67-desktop-win10-win11-64bit-international-dch-whql.exe - -
We can also test steam game installs
Squid - Access Logs Date IP Status Address User Destination 01.08.2023 12:45:05 192.168.1.216 TCP_MEM_HIT/200 https://cache1-mel-aubb.steamcontent.com/depot/229007/chunk/efbdd496141daba8a745607676fc6db008973dcb - - 01.08.2023 12:45:04 192.168.1.216 TCP_MEM_HIT/200 https://cache1-mel-edgx.steamcontent.com/depot/229007/chunk/2195de4a169d3c1374366d8f767fa6fe9fd498d9 - - 01.08.2023 12:45:04 192.168.1.216 TCP_MEM_HIT/200 https://cache1-mel-edgx.steamcontent.com/depot/229007/chunk/7e4256100b2e9e36b03328c920ec5690f7fb2265 - - 01.08.2023 12:45:01 192.168.1.216 TCP_HIT/200 https://cache2-mel-aubb.steamcontent.com/depot/229007/chunk/bdbba09c717f62d9717acee8cb18d9f532089ac4 - - 01.08.2023 12:45:01 192.168.1.216 TCP_MEM_HIT/200 https://cache2-mel-aubb.steamcontent.com/depot/229007/chunk/4da92d6310e971c413fcc35dc3fed15c0d73c3d9 - - 01.08.2023 12:45:01 192.168.1.216 TCP_MEM_HIT/200 https://cache1-mel-aubb.steamcontent.com/depot/229007/chunk/6d3a0bf8bb2e92ec0ad19d3fdb6ea02fb4fcba11 - - 01.08.2023 12:45:01 192.168.1.216 TCP_MEM_HIT/200 https://cache1-mel-aubb.steamcontent.com/depot/229007/chunk/6b7b17db8e0c8010703ca22ea33ae010cac9e860 - - 01.08.2023 12:45:00 192.168.1.216 TCP_HIT/200 https://cache1-mel-edgx.steamcontent.com/depot/229007/chunk/97713480a87970bb9b5619587efccd511930942c - - 01.08.2023 12:45:00 192.168.1.216 TCP_MEM_HIT/200 https://cache1-mel-edgx.steamcontent.com/depot/229007/chunk/d82f9b75c63f57640a1264a427318e825d21f5b2 - - 01.08.2023 12:45:00 192.168.1.216 TCP_MEM_HIT/200 https://cache1-mel-edgx.steamcontent.com/depot/229007/chunk/af2614bc4a7d7fa5a50c5518ce7ba46169a15fe6 - - 01.08.2023 12:45:00 192.168.1.216 TCP_MEM_HIT/200 https://cache1-mel-edgx.steamcontent.com/depot/229007/chunk/614b85b52f873e7b4a2a5b583b9bd1f21c318fe1 - - 01.08.2023 12:45:00 192.168.1.216 TCP_MEM_HIT/200 https://cache1-mel-aubb.steamcontent.com/depot/229007/chunk/a331e139560cdb6dd6aeaf4e5add80ee2e98e038
Now there can be reasons why not all content is cacheable, there could be domains that were not in the bump list or maybe some links a redirected etc. Though this should give you a step in the right direction for caching content without breaking the internet.
Just also note that once again things can change the way updates are given to the users so you will need to make updates as this happens.