> i've double check the backend server and it return "Cache-Control" > header accordingly. but somehow, varnishd trim it. > what could be wrong? If you have a hit-for-pass case, this should fix the issue: http://www.varnish-cache.org/trac/changeset/5625