Switched to using ftp.funet.fi instead of www.kernel-org - www.kernel.org does nasty redirect to https, which fucks up squid caching (and I'm using Docker so I rather get performance than security).