https://medium.com/tenable-techblog/lessons-from-aws-nlb-timeouts-5028a8f65dda
- Consider enabling (and tuning) TCP keepalive in your Target. Enabling TCP keepalive avoids silent connection failures. The default /proc/sys/net/ipv4/tcp_keepalive_time in Linux is 7200 (2 hours). Make sure you tune this parameter to well under 350s to avoid NLB timeouts.
https://github.com/istio/istio/issues/16572
tcp_keepalive_time (default: 7200) tcp_keepalive_intvl (default: 75) tcp_keepalive_probes (default: 9)