Hey everyone, been lurking for a bit while learning. We run a simple web app on AWS behind a Radware Cloud WAF.
Since the last platform update a couple days ago, I'm seeing a lot of TCP RST packets for what looks like perfectly normal user traffic. It's causing some weird connection drops for our users. Nothing changed on our end in the app or infra.
I set up a test with a simple curl from my machine to see if I could catch it. In the app logs, I see the request start, but then it just dies. Running a tcpdump on our instance (in the security group allowing my IP) shows the RST coming from the WAF's side.
Here's a super simplified version of the test. Our actual app is more complex, but the pattern is the same.
```bash
# Basic health check that sometimes gets reset
curl -v https://our-app.example.com/api/health
```
The connection establishes, starts the TLS handshake, and then sometimes... RST. It's not all the time, which is the confusing part.
Is this just me? I'm still new to networking debugging at this level. Could it be a new timeout setting or something? Any pointers on what to check in the dashboard would be awesome 😅