The archive worker’s forward cache is Squid. Misses dial socks5h, so the gateway resolves the name and the worker does not. Apache Traffic Server was refused because it sends an IP it has already looked up, which rather defeats the point, a sensation I know well.