--- title: "522 Connection Timed Out — what it means and how to fix it" description: "Cloudflare tried to open a connection to the origin server and never got a reply. What causes an HTTP 522, what to try as a visitor, and what to check if it is your own site." url: https://atoneplace.net/error/522/ site: "At One Place" --- # HTTP 522 — Connection Timed Out **HTTP 522: Connection Timed Out** Cloudflare tried to open a connection to the origin server and never got a reply. ## What 522 actually means Another Cloudflare code rather than a real HTTP one. Where 521 is an active refusal, 522 is silence: Cloudflare sent a connection request to the origin and the TCP handshake never completed before the timeout. That pattern — packets going out and nothing coming back — points at a firewall dropping rather than rejecting traffic, a wrong IP address in DNS, or an origin so overloaded it cannot accept new connections. ## Common causes - A firewall silently dropping packets from Cloudflare instead of rejecting them - The origin IP in Cloudflare's DNS pointing at the wrong or an old server - The origin server overloaded and unable to accept new connections - Network routing problems between Cloudflare and the origin - The origin server's connection backlog full - Keep-alives disabled at the origin, exhausting the port range under load ## If you're just trying to view the page 1. Reload after a minute or two; overload-related 522s often clear 2. Nothing else — the failure is between Cloudflare and the site's server 3. Report it with the Ray ID if it persists ## If it's your site 1. Check the origin firewall for DROP rules affecting Cloudflare IP ranges — dropping is what turns a 521 into a 522 2. Verify the A/AAAA record in Cloudflare points at the correct current origin IP 3. Look at server load, connection counts and the accept backlog on the origin 4. Enable keep-alives at the origin; Cloudflare relies on them and disabling them causes intermittent 522s 5. Test the origin directly from outside your network on the same port to confirm reachability ## Reference - **Status code:** 522 - **Reason phrase:** Connection Timed Out - **Category:** 5xx — Server Error - **Cacheable by default:** No ## Common questions ### What does HTTP 522 mean? Cloudflare tried to open a connection to the origin server and never got a reply. Another Cloudflare code rather than a real HTTP one. Where 521 is an active refusal, 522 is silence: Cloudflare sent a connection request to the origin and the TCP handshake never completed before the timeout. ### How do I fix a 522 error? Reload after a minute or two; overload-related 522s often clear ### Is 522 a client error or a server error? 522 is in the 5xx range, which means server error. The request was acceptable but the server could not fulfil it, so retrying later can succeed. ## Related pages - [500 Internal Server Error](https://atoneplace.net/error/500/) - [502 Bad Gateway](https://atoneplace.net/error/502/) - [503 Service Unavailable](https://atoneplace.net/error/503/) - [504 Gateway Timeout](https://atoneplace.net/error/504/) - [524 A Timeout Occurred](https://atoneplace.net/error/524/) - [521 Web Server Is Down](https://atoneplace.net/error/521/) - [520 Web Server Returned an Unknown Error](https://atoneplace.net/error/520/) - [525 SSL Handshake Failed](https://atoneplace.net/error/525/) - [526 Invalid SSL Certificate](https://atoneplace.net/error/526/) - [530 Origin DNS Error](https://atoneplace.net/error/530/) - [501 Not Implemented](https://atoneplace.net/error/501/) - [511 Network Authentication Required](https://atoneplace.net/error/511/) ## Sources - Hypertext Transfer Protocol (HTTP) Status Code Registry — IANA (https://www.iana.org/assignments/http-status-codes/) - RFC 9110: HTTP Semantics — IETF (https://www.rfc-editor.org/rfc/rfc9110.html)