@B.R. You're right, seemed my upstream tomcat instances were RESETing cnx as reply something.

So far I improved it a lot my altering a http connector keepAliveTimeout value from mistakenly expressed as sec when in fact it should be msec ;)

When heavy load it still occurs but far less frequently, will dig deeper into tomcat trimming/tunning