Answer these questions to help the Community help you with Security questions.
What is the domain name?
‘buildersblocks’
Have you searched for an answer?
Yes
Please share your search results url:
error-522-host-error-aws-hosting/170288
When you tested your domain using the [Cloudflare Diagnostic Center], what were the results?
Describe the issue you are having:
I am receiving a 522 error. Cloudfare’s documentation says to contact my hosting provider (GoDaddy) which I did and they said “I have checked and you have to contact the cloudfare for this as the cloudfare firewall is used. This might be an issue with Cloudfare firewall.”
What error message or number are you receiving? 522
What steps have you taken to resolve the issue?
Read documentation
Contacted hosting provider like instructed
Searched forum
Was the site working with SSL prior to adding it to Cloudflare?
SSL is not set up
What are the steps to reproduce the error:
Go to website
Have you tried from another browser and/or incognito mode?
Yes
i have this in my notes, glad if it is of any help, keepalive is the only one i’ve ever had issue with
When someone visits a Cloudflare-enabled website, a connection is established between Cloudflare and the website’s origin server. To establish a connection, TCP uses the three-way handshake shown as follows:
Cloudflare sends three SYN packets to the origin server.
In response, the origin server replies with a SYN+ACK.
Finally, Cloudflare sends an ACK back to the origin server.
But the error 522 connection timed out will occur, if the following 2 cases happen:
Before a connection is established, the origin web server does not return a SYN+ACK to Cloudflare within 15 seconds of Cloudflare sending a SYN.
After a connection is established, the origin web server doesn’t acknowledge (ACK) Cloudflare’s resource request within 90 seconds.
Then, what causes the error 522? The possible reasons are as follows:
Cloudflare IP addresses are rate limited or blocked in .htaccess, iptables, or firewalls. Confirm your hosting provider allows Cloudflare IP addresses.
An overloaded or offline origin web server drops incoming requests.
Keepalives are disabled at the origin web server.
The origin IP address in your Cloudflare DNS app does not match the IP address currently provisioned to your origin web server by your hosting provider.
Packets were dropped at your origin web server.
