Client met Error 522

[user2622]

Hi everyone,
Many client met error 522

I added ip to whitelisted but not working. Please help me!

[sandro]

Community Tip - Fixing Error 522: Connection timed out

Error Try the suggestions in this Community Tip to help you fix Error 522 “ERR CONNECTION TIMED OUT” in Google Chrome or “The connection has timed out” in Firefox. Background A 522 error happens when a TCP connection to the web server could not be established. This typically happens when Cloudflare requests to the origin (your webserver) get blocked. When this happens, you’ll see “ERR_CONNECTION_TIMED_OUT”. Quick Fix Ideas Make sure that you’re not blocking Cloudflare IPs in .htaccess, ip…

[user2622]

Thanks Sandro
Data output of https://hris.ipeoplex.com/cdn-cgi/trace:

Well client:
fl=23f95
h=hris.ipeoplex.com
ip=14.177.72.224
ts=1547126278.587
visit_scheme=https
uag=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
(KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
colo=HKG
http=h2
loc=VN
tls=TLSv1.3
sni=plaintext

Failed client:
fl=177f18
h=hris.ipeoplex.com
ip=1.55.226.85
ts=1547127086.451
visit_scheme=https
uag=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
(KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
colo=HAN
http=h2
loc=VN
tls=TLSv1.3
sni=plaintext

Tks.

[user2622]

Hi Cloudflare Support Team,

We are currently using Cloudflare’s SSL service for domain ipeoplex.com
When connecting to the my web site https://hris.ipeoplex.com , we have the following problems:

• The clients using internet service of Viettel or VNPT run well.
• The clients using internet service of FPT cannot running, the browser reports “Error 522”. We have tested on this clients, them can still access CloudFare’s website.

Tracert data on the client has errors at the bottom.

Look forward to your support.
Thank you very much.

C:>Tracert hris.ipeoplex.com
Tracing route to hris.ipeoplex.com [104.27.148.240]
over a maximum of 30 hops:
1 25 ms 1 ms 1 ms 118.70.244.17
2 1 ms 1 ms 1 ms 118.71.250.5
3 * * * Request timed out.
4 2 ms 2 ms 2 ms 10.245.35.252
5 2 ms 1 ms 2 ms 42.112.2.158
6 2 ms 1 ms 3 ms 10.245.32.235
7 27 ms 21 ms 22 ms 118.69.132.132
8 22 ms 23 ms 25 ms 118.69.252.173
9 23 ms 23 ms 23 ms 118.69.221.210
10 22 ms 21 ms 21 ms 104.27.148.240
Trace complete.

C:\Users\VanHuong>tracert hris.ipeoplex.com
Tracing route to hris.ipeoplex.com [104.27.148.240]
over a maximum of 30 hops:
1 1 ms 1 ms <1 ms 192.168.1.1
2 3 ms 3 ms 5 ms 113.22.4.121
3 81 ms 8 ms 3 ms 42.112.4.26
4 5 ms 5 ms 5 ms 1.55.152.22
5 2 ms 3 ms 3 ms 104.27.148.240
Trace complete.

[sandro]

https://support.cloudflare.com/hc/en-us/articles/200171906-Error-522-Connection-timed-out

I’d check on your server if you possibly have any firewall rules in place which could prevent Cloudflare from connecting from certain PoPs.

Also, can you post the output of https://hris.ipeoplex.com/cdn-cgi/trace for both connections?

[user2622]

Thanks Sandro
Data output of https://hris.ipeoplex.com/cdn-cgi/trace:

Well client:
fl=23f95
h=hris.ipeoplex.com
ip=14.177.72.224
ts=1547126278.587
visit_scheme=https
uag=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
(KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
colo=HKG
http=h2
loc=VN
tls=TLSv1.3
sni=plaintext

Failed client:
fl=177f18
h=hris.ipeoplex.com
ip=1.55.226.85
ts=1547127086.451
visit_scheme=https
uag=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
(KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
colo=HAN
http=h2
loc=VN
tls=TLSv1.3
sni=plaintext

[sandro]

It appears as if the Vietnamese PoP (HAN) cant reach your site whereas the Hongkonger PoP (HKG) can.

Did you check your server firewall if you have any rules in place which could prevent that connection?

[user2622]

Tks,
I have turn off Windows Firewall in my server, but everything not change,

[sandro]

That website is on a Windows server?

[user2622]

Yes. It’s deployment in IIS8 (Windows Server 2012 R2)

[sandro]

Could it be there is anything in the webserver configuration blocking these requests or maybe another firewall outside the machine on the network?

[user2622]

Tks Sandro,

i has make requirement to check ip of Cloudflare in black list, but them response it’s not in black list.

[sandro]

Neither webserver nor firewall?

[user2622]

Yes. And you can check when see the development tools of google chrome ?

[sandro]

The developers tools are unrelated to this issue. If you can rule out that anything is blocking the access your only option is to contact support -> https://support.cloudflare.com/requests/new

[user2622]

Thanks for your supported.

[user2622]

Dear Cloudflare support team,

My website using Cloudflare SSL service.
Domain: ipeoplex.com
My server location in Hanoi / VietNam.

Now all client using FPT Internet service when connect to website ipeoplex.com has Error 522 (Connection timeout) all case using http and https protocols.
I login Cloudflare and change DNS from [DNS and HTTP proxy] to [DNS only] then this client can connect to mysite using http protocol.
I think transmision has problem between CloundFlare Hanoi and FPT Internet Service provider.
Please help me fix it.

Thanks for your support

[cloonan]

@user2622

Cloudflare support

Hi @user2622, just want to add a note, the Community is made of up Cloudflare users helping other Cloudflare users, to reach Cloudflare Customer Support, you’d login to Cloudflare and then contact Cloudflare Support. You can pretty much file a ticket from the bottom of every Help Center article.

In a lot of cases, the community or the archives on the community will enable you to solve any issues. Some issues like account settings, unsupported/future features, or how we route traffic need to be taken up with support. In this case, as @sandro commented, you’ll need to open a ticket with support. Please post back with the ticket number as I’d like to keep an eye on it.

[user2622]

Thank for your suppoted