#1265·SafeLine

[Bug] Incorrect operation of the “Enable upstream server health checks” function

Author: EsyrokvashCreated Feb 5, 2026Updated Aug 28, 2026
Labelsreleased

What happened?

When the option “Enable upstream server health checks” is enabled, the WAF starts spamming the backend nginx with requests like safeline.ex.com. The volume is ~30× the number of normal requests to ex.com. If the checkbox is disabled, everything works fine — no parasitic traffic, no 444 responses from nginx to non‑existent domains.

How we reproduce?

Enable upstream server health checks

Expected behavior

A function should not behave this way. The number of requests should be increased by a maximum of two times.