Upstream Requests to Auth0 Timeout when Using Reverse Proxy

Problem statement

When using a reverse proxy, upstream requests to Auth0 timeout. Timeouts do not occur when making connections to Auth0 directly.

Symptoms

  • A 504 response from reverse proxy—timeout between reverse proxy and Auth0.

Cause

This can be due to the keepalive settings in the reverse proxy or at the OS level on the server on which it is hosted. This is especially true in the case where an AWS NAT gateway is being used. Refer to Intermittent Management API timeouts for apps hosted in AWS

Solution

If using an AWS NAT gateway, shorten the keepalive timeout to < 350 seconds.