HttpClient, the http layer of XFire can leak sockets into CLOSE_WAIT when under heavy load.
Thanks to Liferay for discovering the issue.