Steps to Reproduce:

1. Start Confluence and let it run for a few minutes.
2. Run: lsof -n -i4tcp | grep "CLOSE_WAIT". This will show you the 10 TCP connections sitting in CLOSE_WAIT. For example:

   ~ ❯❯❯ lsof -n -i4tcp | grep "CLOSE_WAIT"
   java      16056 ldally  793u  IPv6 0xf85319dd9dc44215      0t0  TCP 172.22.0.204:59713->172.24.36.4:https (CLOSE_WAIT)
   java      16056 ldally  794u  IPv6 0xf85319dd9c442855      0t0  TCP 172.22.0.204:59714->172.24.36.4:https (CLOSE_WAIT)
   java      16056 ldally  796u  IPv6 0xf85319dd9dc44655      0t0  TCP 172.22.0.204:59715->172.24.36.4:https (CLOSE_WAIT)
   java      16056 ldally  797u  IPv6 0xf85319dd7fa11995      0t0  TCP 172.22.0.204:59716->172.24.36.4:https (CLOSE_WAIT)
   java      16056 ldally  798u  IPv6 0xf85319dd9a7dd315      0t0  TCP 172.22.0.204:59717->172.24.36.4:https (CLOSE_WAIT)
   java      16056 ldally  799u  IPv6 0xf85319dd9c87da95      0t0  TCP 172.22.0.204:59718->172.24.36.4:https (CLOSE_WAIT)
   java      16056 ldally  800u  IPv6 0xf85319dd7b982c95      0t0  TCP 172.22.0.204:59719->172.24.36.4:https (CLOSE_WAIT)
   java      16056 ldally  801u  IPv6 0xf85319dd9b19b515      0t0  TCP 172.22.0.204:59720->172.24.36.4:https (CLOSE_WAIT)
   java      16056 ldally  802u  IPv6 0xf85319dd9c440ed5      0t0  TCP 172.22.0.204:59721->172.24.36.4:https (CLOSE_WAIT)
   java      16056 ldally  803u  IPv6 0xf85319dd9c441315      0t0  TCP 172.22.0.204:59722->172.24.36.4:https (CLOSE_WAIT)

3. Running a traceroute on the external IP shows this points to harp03.internal.atlassian.com, which serves the Marketplace.