TLS/SSL handshake very slow

[Edgar]

I am trying to understand how reliable Fly.io is, as we are seeing constant multi-second TLS handshake times for our machines. I don’t observe any errors in the logs.

App URL: https://dashboard-fe--staging.fly.dev/

Config:

primary_region = 'waw'

[build]

[http_service]
  internal_port = 3000
  force_https = true
  auto_stop_machines = "suspend"
  auto_start_machines = true
  min_machines_running = 1
  processes = ['app']

[[http_service.checks]]
  grace_period = "10s"
  interval = "30s"
  method = "GET"
  path = "/health"
  protocol = "http"
  timeout = "2s"

[[vm]]
  memory = '1gb'
  cpu_kind = 'shared'
  cpus = 1

I am testing from Spain.

[khuezy]

There’s something weird going on w/ Fly’s TLS/SSL. I’m using turso and sometimes it would fail to handshake w/ Fly for 3+ minutes.

[OndrejB]

Not sure if this is related, but we are unable to send HTTP payloads to our apps that have content larger than ~1300 bytes. Sending the same payload after connecting to the instance via SSH works as expected, so I assume the problem is in the proxy.

This is seriously impacting our app.