Silent 502s often mean the upstream closed after proxy_read_timeout while the client still waited. I log $upstream_status and $request_time, then raise the timeout only for the slow route instead of globally.