Domain is not working properly - DNS or SSL error?

What is the name of the domain?

https://www.empathy.toys/

What is the error number?

No error number, but it’s going to a random page that says “renew now”

What is the issue you’re encountering

The domain is not redirecting properly and going to a broken page. I run into this issue every few months and am wondering why the domain keeps breaking/resetting when I don’t make any changes.

What steps have you taken to resolve the issue?

I’ve reviewed the DNS settings to make sure it’s going to the correct IP address which it looks like it is.

I’ve also reviewed the SSL certificate which is currently on Flexible. When I switch to Full or Full (Strict), the website then shows a grey screen with “Web server is down Error code 521

What feature, service or problem is this related to?

DNS not responding/updating

Screenshot of the error

Are you redirecting or are you pointing at your server/web host. I’m not sure from what you are saying which it is.

Can you show a screenshot of your Cloudflare DNS records, and if you are redirecting, the Redirect/Page Rule for the redirect?

You also have an unproxied wildcard (*) record, does that point to the origin you want to use for the site?
https://cf.sjr.dev/tools/check?964857f1b4534cdd92859df58f84dcf4#dns

If you have a server/host and you are not redirecting, you should use only “Full (strict)” and make sure your origin has SSL configured and working. “Flexible” and “Full” modes are not secure.

I am redirecting to Blog: Teaching Empathy – Twenty One Toys

I looked at the page redirect settings and it seems like the redirection wasn’t there anymore. I added it back and it seems to be working now.

Can I still keep the SSL certificate on Flexible?

If you are redirecting all requests it doesn’t matter as Cloudflare doesn’t make an onward connection to an origin, it just returns the redirect to the visitor.

As you are redirecting all requests, you may prefer to remove the existing DNS records for the domain and www and just use a proxied AAAA 100:: for each. This does 2 things:

  • It reminds you that all requests for those should be redirected when you look at the DNS records
  • If the redirect is removed again by mistake, then the request won’t fall through to the IP address in the DNS and so give you that page again. You will just get a Cloudflare error page.

You can check your audit log to see what changes were made and when…
https://dash.cloudflare.com/?to=/:account/audit-log

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.