From 76314029740bb23bddc247fe0f94bf9d5c836840 Mon Sep 17 00:00:00 2001 From: David Birdsong Date: Thu, 27 Aug 2026 13:05:18 -0700 Subject: [PATCH] fix : idle and max connection duration timeouts to Envoy HTTP listeners Connections had no reclaim mechanism, so the downstream pool grew unbounded and eroded headroom under the global connection cap, contributing to load-related handshake failures. Bounds connections to a 5min idle timeout and 10min max duration to force periodic turnover. --- ansible/files/envoy_config/lds.supabase.yaml | 3 +++ ansible/files/envoy_config/lds.yaml | 3 +++ 2 files changed, 6 insertions(+) diff --git a/ansible/files/envoy_config/lds.supabase.yaml b/ansible/files/envoy_config/lds.supabase.yaml index 4fb9721af2..57b6a3949a 100644 --- a/ansible/files/envoy_config/lds.supabase.yaml +++ b/ansible/files/envoy_config/lds.supabase.yaml @@ -12,6 +12,9 @@ resources: typed_config: '@type': >- type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager + common_http_protocol_options: + idle_timeout: 300s + max_connection_duration: 600s access_log: - name: envoy.access_loggers.stdout filter: diff --git a/ansible/files/envoy_config/lds.yaml b/ansible/files/envoy_config/lds.yaml index ce595a38d1..129c38afee 100644 --- a/ansible/files/envoy_config/lds.yaml +++ b/ansible/files/envoy_config/lds.yaml @@ -12,6 +12,9 @@ resources: typed_config: '@type': >- type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager + common_http_protocol_options: + idle_timeout: 300s + max_connection_duration: 600s access_log: - name: envoy.access_loggers.stdout filter: