FIN/ACK closes upstream connection for HTTP, but not for HTTPS

I’m running nginx as a reverse proxy to do SSL and load balancing. The
upstream server behind nginx needs to know when the client closes the
connection.

If I turn ssl off, the connection looks like:

  1. client connects to nginx
  2. nginx connects to upstream
  3. client sends FIN/ACK to nginx
  4. nginx sends FIN/ACK to upstream, and to client

With ssl on:

  1. client connects to nginx
  2. nginx connects to upstream
  3. client sends FIN/ACK to nginx
  4. nginx waits 60 seconds
  5. nginx sends FIN/ACK to upstream

What’s going on here? Why does nginx wait for a timeout to send the
FIN/ACK
upstream? Why does the behaviour change when I turn ssl on?

Thanks,
Jeremy

This forum is not affiliated to the Ruby language, Ruby on Rails framework, nor any Ruby applications discussed here.

| Privacy Policy | Terms of Service | Remote Ruby Jobs