Connection to Cloudflare based website immediately fails with RST ACK

What is the name of the domain?

nodeserver.cloud3squared.com

What is the issue you’re encountering

Connection to Cloudflare based website immediately fails with RST ACK

What steps have you taken to resolve the issue?

Double NATed domestic internet connection.
A BT Smart Hub 2 (required for UK “Digital Voice” landline) and behind that my own third party router which handles all the internet access.

Website loads but connection to nodeserver.cloud3squared.com fails immediately with the initial SYN getting a RST ACK in response

What are the steps to reproduce the issue?

Visit meteograms.com

New user so can’t edit original post…

What other information can I get to figure out why this is failing?

Curl gives

C:\Users\ian>curl ^"http://nodeserver.cloud3squared.com/getToken^" -X ^"OPTIONS^" -H ^"Accept: */*^" -H ^"Access-Control-Request-Headers: pragma^" -H ^"Access-Control-Request-Method: GET^" -H ^"Origin: https://meteograms.com^" -H ^"Sec-Fetch-Mode: cors^" -H ^"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36^" -vvvv --ipv4
14:29:59.870593 [0-x] == Info: [READ] client_reset, clear readers
14:29:59.897601 [0-0] == Info: Host nodeserver.cloud3squared.com:80 was resolved.
14:29:59.908354 [0-0] == Info: IPv6: (none)
14:29:59.911814 [0-0] == Info: IPv4: 104.21.32.1
14:29:59.916775 [0-0] == Info: [SETUP] added
14:29:59.954809 [0-0] == Info: [HAPPY-EYEBALLS] created ipv4 (timeout 299916ms)
14:29:59.961006 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 starting (timeout=299910ms)
14:29:59.968233 [0-0] == Info:   Trying 104.21.32.1:80...
14:29:59.972423 [0-0] == Info: [TCP] cf_socket_open() -> 0, fd=412
14:29:59.977429 [0-0] == Info: [TCP] local address 0.0.0.0 port 54735...
14:29:59.983609 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
14:29:59.990430 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=412
14:29:59.996214 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
14:30:00.002916 [0-0] == Info: [TCP] not connected yet
14:30:00.006913 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
14:30:00.012621 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=412
14:30:00.020468 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
14:30:01.038487 [0-0] == Info: [TCP] not connected yet
14:30:01.045846 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
14:30:01.058449 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=412
14:30:01.066041 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
14:30:02.019517 [0-0] == Info: connect to 104.21.32.1 port 80 from 0.0.0.0 port 54735 failed: Connection refused
14:30:02.029708 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 7, connected=0
14:30:02.044411 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 done
14:30:02.052706 [0-0] == Info: [HAPPY-EYEBALLS] all eyeballers failed
14:30:02.058946 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 assess started=1, result=7
14:30:02.066376 [0-0] == Info: Failed to connect to nodeserver.cloud3squared.com port 80 after 2149 ms: Could not connect to server
14:30:02.078251 [0-0] == Info: [WRITE] cw-out done
14:30:02.084716 [0-0] == Info: closing connection #0
14:30:02.089520 [0-0] == Info: [SETUP] close
14:30:02.093009 [0-0] == Info: [HAPPY-EYEBALLS] close
14:30:02.097889 [0-0] == Info: [TCP] destroy
14:30:02.102012 [0-0] == Info: [HAPPY-EYEBALLS] destroy
14:30:02.106211 [0-0] == Info: [SETUP] destroy
curl: (7) Failed to connect to nodeserver.cloud3squared.com port 80 after 2149 ms: Could not connect to server

Wireshark:

SYN

Frame 329131: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface \Device\NPF_{E5D3328F-A367-4460-9484-16D14B52CD5E}, id 0
    Section number: 1
    Interface id: 0 (\Device\NPF_{E5D3328F-A367-4460-9484-16D14B52CD5E})
        Interface name: \Device\NPF_{E5D3328F-A367-4460-9484-16D14B52CD5E}
        Interface description: Ethernet
    Encapsulation type: Ethernet (1)
    Arrival Time: Mar  4, 2025 14:23:52.226449000 GMT Standard Time
    UTC Arrival Time: Mar  4, 2025 14:23:52.226449000 UTC
    Epoch Arrival Time: 1741098232.226449000
    [Time shift for this packet: 0.000000000 seconds]
    [Time delta from previous captured frame: 0.001772000 seconds]
    [Time delta from previous displayed frame: 209.101530000 seconds]
    [Time since reference or first frame: 2874.910472000 seconds]
    Frame Number: 329131
    Frame Length: 66 bytes (528 bits)
    Capture Length: 66 bytes (528 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ethertype:ip:tcp]
    [Coloring Rule Name: TCP SYN/FIN]
    [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1]
Ethernet II, Src: OfficeDev.local (b4:2e:99:15:f0:2c), Dst: router.bigwave.org.uk (20:05:b6:ff:19:b1)
    Destination: router.bigwave.org.uk (20:05:b6:ff:19:b1)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: OfficeDev.local (b4:2e:99:15:f0:2c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IPv4 (0x0800)
    [Stream index: 2]
Internet Protocol Version 4, Src: OfficeDev.local (192.168.2.200), Dst: nodeserver.cloud3squared.com (104.21.32.1)
    0100 .... = Version: 4
    .... 0101 = Header Length: 20 bytes (5)
    Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
        0000 00.. = Differentiated Services Codepoint: Default (0)
        .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
    Total Length: 52
    Identification: 0x5b6f (23407)
    010. .... = Flags: 0x2, Don't fragment
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    ...0 0000 0000 0000 = Fragment Offset: 0
    Time to Live: 128
    Protocol: TCP (6)
    Header Checksum: 0x0000 [validation disabled]
    [Header checksum status: Unverified]
    Source Address: OfficeDev.local (192.168.2.200)
    Destination Address: nodeserver.cloud3squared.com (104.21.32.1)
    [Stream index: 10]
Transmission Control Protocol, Src Port: 54558 (54558), Dst Port: https (443), Seq: 0, Len: 0
    Source Port: 54558 (54558)
    Destination Port: https (443)
    [Stream index: 2296]
    [Stream Packet Number: 1]
    [Conversation completeness: Incomplete (37)]
        ..1. .... = RST: Present
        ...0 .... = FIN: Absent
        .... 0... = Data: Absent
        .... .1.. = ACK: Present
        .... ..0. = SYN-ACK: Absent
        .... ...1 = SYN: Present
        [Completeness Flags: R··A·S]
    [TCP Segment Len: 0]
    Sequence Number: 0    (relative sequence number)
    Sequence Number (raw): 3244518989
    [Next Sequence Number: 1    (relative sequence number)]
    Acknowledgment Number: 0
    Acknowledgment number (raw): 0
    1000 .... = Header Length: 32 bytes (8)
    Flags: 0x002 (SYN)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Accurate ECN: Not set
        .... 0... .... = Congestion Window Reduced: Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...0 .... = Acknowledgment: Not set
        .... .... 0... = Push: Not set
        .... .... .0.. = Reset: Not set
        .... .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port 443]
                [Connection establish request (SYN): server port 443]
                [Severity level: Chat]
                [Group: Sequence]
        .... .... ...0 = Fin: Not set
        [TCP Flags: ··········S·]
    Window: 64240
    [Calculated window size: 64240]
    Checksum: 0x4bad [unverified]
    [Checksum Status: Unverified]
    Urgent Pointer: 0
    Options: (12 bytes), Maximum segment size, No-Operation (NOP), Window scale, No-Operation (NOP), No-Operation (NOP), SACK permitted
        TCP Option - Maximum segment size: 1460 bytes
            Kind: Maximum Segment Size (2)
            Length: 4
            MSS Value: 1460
        TCP Option - No-Operation (NOP)
            Kind: No-Operation (1)
        TCP Option - Window scale: 8 (multiply by 256)
            Kind: Window Scale (3)
            Length: 3
            Shift count: 8
            [Multiplier: 256]
        TCP Option - No-Operation (NOP)
            Kind: No-Operation (1)
        TCP Option - No-Operation (NOP)
            Kind: No-Operation (1)
        TCP Option - SACK permitted
            Kind: SACK Permitted (4)
            Length: 2
    [Timestamps]
        [Time since first frame in this TCP stream: 0.000000000 seconds]
        [Time since previous frame in this TCP stream: 0.000000000 seconds]

RST ACK

Frame 329132: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface \Device\NPF_{E5D3328F-A367-4460-9484-16D14B52CD5E}, id 0
    Section number: 1
    Interface id: 0 (\Device\NPF_{E5D3328F-A367-4460-9484-16D14B52CD5E})
        Interface name: \Device\NPF_{E5D3328F-A367-4460-9484-16D14B52CD5E}
        Interface description: Ethernet
    Encapsulation type: Ethernet (1)
    Arrival Time: Mar  4, 2025 14:23:52.226793000 GMT Standard Time
    UTC Arrival Time: Mar  4, 2025 14:23:52.226793000 UTC
    Epoch Arrival Time: 1741098232.226793000
    [Time shift for this packet: 0.000000000 seconds]
    [Time delta from previous captured frame: 0.000344000 seconds]
    [Time delta from previous displayed frame: 0.000344000 seconds]
    [Time since reference or first frame: 2874.910816000 seconds]
    Frame Number: 329132
    Frame Length: 60 bytes (480 bits)
    Capture Length: 60 bytes (480 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ethertype:ip:tcp]
    [Coloring Rule Name: TCP RST]
    [Coloring Rule String: tcp.flags.reset eq 1]
Ethernet II, Src: router.bigwave.org.uk (20:05:b6:ff:19:b1), Dst: OfficeDev.local (b4:2e:99:15:f0:2c)
    Destination: OfficeDev.local (b4:2e:99:15:f0:2c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: router.bigwave.org.uk (20:05:b6:ff:19:b1)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IPv4 (0x0800)
    [Stream index: 2]
    Padding: 000000000000
Internet Protocol Version 4, Src: nodeserver.cloud3squared.com (104.21.32.1), Dst: OfficeDev.local (192.168.2.200)
    0100 .... = Version: 4
    .... 0101 = Header Length: 20 bytes (5)
    Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
        0000 00.. = Differentiated Services Codepoint: Default (0)
        .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
    Total Length: 40
    Identification: 0x0000 (0)
    010. .... = Flags: 0x2, Don't fragment
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    ...0 0000 0000 0000 = Fragment Offset: 0
    Time to Live: 64
    Protocol: TCP (6)
    Header Checksum: 0xef49 [validation disabled]
    [Header checksum status: Unverified]
    Source Address: nodeserver.cloud3squared.com (104.21.32.1)
    Destination Address: OfficeDev.local (192.168.2.200)
    [Stream index: 10]
Transmission Control Protocol, Src Port: https (443), Dst Port: 54558 (54558), Seq: 1, Ack: 1, Len: 0
    Source Port: https (443)
    Destination Port: 54558 (54558)
    [Stream index: 2296]
    [Stream Packet Number: 2]
    [Conversation completeness: Incomplete (37)]
        ..1. .... = RST: Present
        ...0 .... = FIN: Absent
        .... 0... = Data: Absent
        .... .1.. = ACK: Present
        .... ..0. = SYN-ACK: Absent
        .... ...1 = SYN: Present
        [Completeness Flags: R··A·S]
    [TCP Segment Len: 0]
    Sequence Number: 1    (relative sequence number)
    Sequence Number (raw): 0
    [Next Sequence Number: 1    (relative sequence number)]
    Acknowledgment Number: 1    (relative ack number)
    Acknowledgment number (raw): 3244518990
    0101 .... = Header Length: 20 bytes (5)
    Flags: 0x014 (RST, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Accurate ECN: Not set
        .... 0... .... = Congestion Window Reduced: Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 0... = Push: Not set
        .... .... .1.. = Reset: Set
            [Expert Info (Warning/Sequence): Connection reset (RST)]
                [Connection reset (RST)]
                [Severity level: Warning]
                [Group: Sequence]
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
        [TCP Flags: ·······A·R··]
    Window: 0
    [Calculated window size: 0]
    [Window size scaling factor: -1 (unknown)]
    Checksum: 0x5dbe [unverified]
    [Checksum Status: Unverified]
    Urgent Pointer: 0
    [Timestamps]
        [Time since first frame in this TCP stream: 0.000344000 seconds]
        [Time since previous frame in this TCP stream: 0.000344000 seconds]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 329131]
        [The RTT to ACK the segment was: 0.000344000 seconds]
        [iRTT: 0.000344000 seconds]

The website works when accessed through a VPN.

This topic was automatically closed after 15 days. New replies are no longer allowed.