From c8d1296ad3e39a0f1693b182b43e7cb57502d577 Mon Sep 17 00:00:00 2001
From: nik-localstack <nikos.michas@localstack.cloud>
Date: Tue, 26 May 2026 11:32:07 +0300
Subject: [PATCH] fix: improve proxy SSL resilience under fragmented TCP
 delivery

---
 postgresql_proxy/proxy.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/postgresql_proxy/proxy.py b/postgresql_proxy/proxy.py
index e19ea97..47389d2 100644
--- a/postgresql_proxy/proxy.py
+++ b/postgresql_proxy/proxy.py
@@ -263,6 +263,10 @@ def service_connection(self, key: SelectorKeyProxy, mask):
                     # A file object shall be unregistered prior to being closed.
                     sock.close()
                     return
+            except ssl.SSLWantReadError:
+                # Partial TLS record received; the selector will fire again when the
+                # remaining bytes of the record arrive. Do not treat this as a disconnect.
+                pass
             except OSError as e:
                 # it means the socket was closed by peer
                 LOG.debug(