5225xx Server ErrorCritical

HTTP 522 Connection Timed Out

Defined in Cloudflare

What Does HTTP 522 Mean?

Cloudflare could not negotiate a TCP handshake with the origin server within the timeout period.

Common Causes

  1. 1Origin server overloaded and slow to respond
  2. 2Network routing issues between Cloudflare and origin
  3. 3Origin firewall silently dropping Cloudflare packets
  4. 4DNS pointing to wrong origin IP address

Impact

  • Website unavailable after long loading time
  • Pages time out instead of loading

Developer Fix

For web developers and application engineers

  1. 1Verify origin server IP in Cloudflare DNS settings
  2. 2Test TCP connectivity to origin from external locations
  3. 3Check origin server response times

Server Admin Fix

For system administrators and DevOps engineers

  1. 1Verify Cloudflare DNS A/AAAA records point to correct origin IP
  2. 2Whitelist Cloudflare IPs in firewall (don't silently drop)
  3. 3Check origin server load and resource availability
  4. 4Verify network routing between Cloudflare and origin

Frequently Asked Questions

What's the difference between 521 and 522?
521 means the connection was actively refused (server not listening or firewall rejecting). 522 means the connection attempt timed out (packets dropped or server too slow to respond).
How do I troubleshoot a 522?
1. Verify DNS points to the correct origin IP. 2. Check that the origin is reachable (not just from your network). 3. Whitelist Cloudflare IPs. 4. Check origin server load and response times.

Related HTTP Status Codes

About the Author

Web Infrastructure Team

Verified against official RFC specifications and real-world server configurations. HTTP status code behavior confirmed across Apache, Nginx, and Cloudflare.