blumeops/docs/changelog.d/fly-proxy-keepalive.infra.md at 9bafe85b2bd1f0f2c8291fa243b8edbb9bbe0270

Deploy Fly.io Proxy / deploy (push) Successful in 1m37s

Details

Switch Fly proxy to upstream keepalive pools (#337 )

## Summary

- Replace per-request DNS resolution (variable-based `proxy_pass`) with static `upstream` blocks and `keepalive` connection pools
- Reuses TLS connections through the Tailscale tunnel instead of handshaking per request
- Add `mise run fly-reload` for nginx config reload without full redeploy (re-resolves upstream DNS)

## Trade-off

DNS is resolved at config load, not per-request. If Tailscale Ingress pods get new IPs (restart, reschedule), `mise run fly-reload` is needed. A Grafana alert will be added to detect this.

## Still TODO on this branch

- [ ] Grafana alert for upstream unreachable (triggers fly-reload reminder)
- [ ] Docs pass
- [ ] Deploy from branch and verify latency improvement
- [ ] Changelog fragment

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: #337

2026-04-17 16:39:52 -07:00

176 B

Raw Blame History

Switched Fly proxy to upstream keepalive pools, reducing forge.eblu.me latency from 35s+ p50 to sub-second. Added mise run fly-reload for DNS re-resolution without redeploy.

176 B Raw Blame History

176 B

Raw Blame History