Domain inaccessible with CF proxy

Website, Application, Performance
1

What is the name of the domain?

v-bastion.net

What is the error number?

522

What is the error message?

Connection timed out

What is the issue you’re encountering

I’m unable to reach my domain name

What steps have you taken to resolve the issue?

What are the steps to reproduce the issue?

Type the Domain name (with https://)

Also, If the hostname is typed with http:// in front of it is accessible.

I checked the server itself, everything seems okay it is accessible from the internet on port 80 and 443.
To be honest, I have not changed anything in the setup. It was the moment when the services became unavailable that I started tinkering around.

The error was encountered from several Cloudflare points:

  • Sofia
  • Istanbul
  • Amsterdam

Screenshot of the error

Pasted image.png
Pasted image.png1920×879 76.3 KB

2

The issue is similar to this one, however I’m using a server from Hetzner.

3

The actual domain is sonarqube.v-bastion.net, but it is applicable for every other subdomain too.

4

Hello,

From the screenshot the error that is displaying is Error 522.

Error 522 occurs when Cloudflare times out contacting the origin web server.

Two different timeouts cause HTTP error 522 depending on when they occur between Cloudflare and the origin web server:

  1. Before a connection is established, the origin web server does not return a SYN+ACK to Cloudflare within 15 seconds of Cloudflare sending a SYN.
  2. After a connection is established, the origin web server doesn’t acknowledge (ACK) Cloudflare’s resource request within 90 seconds.

Kindly review this document for the resolution : Troubleshooting Cloudflare 5XX errors · Cloudflare Support docs

Thank you

5

I’ve checked all the specified causes in the documentation pages, but I still have no clue why am I able to connect to the domain over HTTP, while this issue only affects HTTPS traffic. The flow of requests seems normal, at least on the server itself with HTTP. But once i start using HTTPS, nothing comes to the server. Can it be related to the TLS termination?

6

Hey, thanks for the support. :raised_hands: That was quite a funny mistake, I must say.

It was the Encryption mode - it was set to Strict. Switching it to Full fixed it.

Apparently, this also causes errors 522 and 521.
I definitely need to check how those things differentiate. :grin:

7

Happy to see that switching to Full has fixed the issue. But, as per my knowledge, that Full Strict is the best mode of encryption. You may learn why so here:

2 Likes