19.6.2

ts/proxies/smart-proxy/connection-manager.ts

@@ -488,14 +488,19 @@ export class ConnectionManager extends LifecycleComponent {
         // Check for half-zombie: one socket destroyed
         if (incomingDestroyed || outgoingDestroyed) {
           const age = now - record.incomingStartTime;
-          // Give it 30 seconds grace period for normal cleanup
-          if (age > 30000) {
+          // Use longer grace period for encrypted connections (5 minutes vs 30 seconds)
+          const gracePeriod = record.isTLS ? 300000 : 30000;
+          
+          // Also ensure connection is old enough to avoid premature cleanup
+          if (age > gracePeriod && age > 10000) {
             logger.log('warn', `Half-zombie connection detected: ${connectionId} - ${incomingDestroyed ? 'incoming' : 'outgoing'} destroyed`, {
               connectionId,
               remoteIP: record.remoteIP,
               age: plugins.prettyMs(age),
               incomingDestroyed,
               outgoingDestroyed,
+              isTLS: record.isTLS,
+              gracePeriod: plugins.prettyMs(gracePeriod),
               component: 'connection-manager'
             });
             
@@ -507,8 +512,11 @@ export class ConnectionManager extends LifecycleComponent {
         // Check for stuck connections: no data sent back to client
         if (!record.connectionClosed && record.outgoing && record.bytesReceived > 0 && record.bytesSent === 0) {
           const age = now - record.incomingStartTime;
-          // If connection is older than 60 seconds and no data sent back, likely stuck
-          if (age > 60000) {
+          // Use longer grace period for encrypted connections (5 minutes vs 60 seconds)
+          const stuckThreshold = record.isTLS ? 300000 : 60000;
+          
+          // If connection is older than threshold and no data sent back, likely stuck
+          if (age > stuckThreshold) {
             logger.log('warn', `Stuck connection detected: ${connectionId} - received ${record.bytesReceived} bytes but sent 0 bytes`, {
               connectionId,
               remoteIP: record.remoteIP,
@@ -516,6 +524,8 @@ export class ConnectionManager extends LifecycleComponent {
               bytesReceived: record.bytesReceived,
               targetHost: record.targetHost,
               targetPort: record.targetPort,
+              isTLS: record.isTLS,
+              threshold: plugins.prettyMs(stuckThreshold),
               component: 'connection-manager'
             });