522 Connection Timed Out
A Cloudflare-specific code: the origin did not complete the TCP handshake within the allowed time.
Cloudflare timed out trying to establish a TCP connection to the origin.
522 is an unofficial status code used by Cloudflare. It is not part of the HTTP standard or the IANA registry.
What HTTP 522 Connection Timed Out Means
Cloudflare timed out trying to establish a TCP connection to the origin.
A Cloudflare-specific code: the origin did not complete the TCP handshake within the allowed time.
Common Causes
- Origin overloaded or too slow to accept connections
- Firewall dropping (not rejecting) Cloudflare traffic
- Network routing issues between Cloudflare and origin
- Origin keepalive settings too low
How to Fix It (For Visitors)
- Refresh the page after a minute
- Contact the website owner
How to Fix It (For Developers/Admins)
- Allow Cloudflare IPs and stop dropping packets
- Reduce origin load / scale up
- Increase keepalive timeout on the origin
- Check routing and MTU between Cloudflare and origin
How to Troubleshoot Cloudflare Errors
Every Cloudflare error page shows a Ray ID and tells you whether the browser, Cloudflare, or the origin host is failing. To test the origin directly while keeping the correct hostname, bypass Cloudflare with curl:
# Replace 203.0.113.10 with your origin server's IP
curl -svo /dev/null --resolve example.com:443:203.0.113.10 https://example.com/If this request fails or is slow, the problem is on the origin, not at Cloudflare. Also make sure your firewall, security plugins, and rate limiters allow Cloudflare's IP ranges.
522 is typical when a firewall drops packets from Cloudflare (for example after fail2ban or a hosting firewall bans Cloudflare IPs) rather than rejecting them.
Frequently Asked Questions
What does HTTP 522 Connection Timed Out mean?
A Cloudflare-specific code: the origin did not complete the TCP handshake within the allowed time. In short: Cloudflare timed out trying to establish a TCP connection to the origin.
Is 522 an official HTTP status code?
No. 522 is not registered in the IANA HTTP Status Code Registry; it is specific to Cloudflare. A client that receives an unrecognized status code treats it like the generic 500 code of its class.
How do I fix a 522 Connection Timed Out error?
Allow Cloudflare IPs and stop dropping packets. Reduce origin load / scale up. Increase keepalive timeout on the origin.
Specification Status
522 Connection Timed Out is not an official HTTP status code. It is not registered in the IANA HTTP Status Code Registry and is specific to Cloudflare. Other servers and clients may not recognize it.