Hi. Here’s an article about 522s
https://support.cloudflare.com/hc/en-us/articles/200171906-Error-522-Connection-timed-out
Something that stood out to me was:
The origin has a firewall (or rate-limiter) that is blocking our requests
This is the most common cause of intermittent 522 errors.
…
Most of the requests for the website through Cloudflare will appear to come from only a handful of our IP addresses. Because of that, this can often trigger firewalls and IP rate-limiters to block requests from us, thinking that the website is under attack.
Not sure of this is the case but your DDoS protection through your provider may be the culprit here.