Cache control rules are matched by function getCacheControl. this function is called after the client's request has been read.At this point, the dest_ip in HttpRequestData is empty,so it's impossible to match primary key is dest_ip. And,after parsing DNS,The function is not called again for matching.