Turns out forwarded-connect-retries is partly broken. Spread the news.