5225xx Server ErrorCritical
HTTP 522 Connection Timed Out
Defined in Cloudflare
What Does HTTP 522 Mean?
Cloudflare could not negotiate a TCP handshake with the origin server within the timeout period.
Common Causes
- 1Origin server overloaded and slow to respond
- 2Network routing issues between Cloudflare and origin
- 3Origin firewall silently dropping Cloudflare packets
- 4DNS pointing to wrong origin IP address
Impact
- ⚠Website unavailable after long loading time
- ⚠Pages time out instead of loading
Ad Space – header
Developer Fix
For web developers and application engineers
- 1Verify origin server IP in Cloudflare DNS settings
- 2Test TCP connectivity to origin from external locations
- 3Check origin server response times
Server Admin Fix
For system administrators and DevOps engineers
- 1Verify Cloudflare DNS A/AAAA records point to correct origin IP
- 2Whitelist Cloudflare IPs in firewall (don't silently drop)
- 3Check origin server load and resource availability
- 4Verify network routing between Cloudflare and origin
Ad Space – after-fix
Frequently Asked Questions
What's the difference between 521 and 522?
521 means the connection was actively refused (server not listening or firewall rejecting). 522 means the connection attempt timed out (packets dropped or server too slow to respond).
How do I troubleshoot a 522?
1. Verify DNS points to the correct origin IP. 2. Check that the origin is reachable (not just from your network). 3. Whitelist Cloudflare IPs. 4. Check origin server load and response times.
Related HTTP Status Codes
About the Author
Web Infrastructure Team
Verified against official RFC specifications and real-world server configurations. HTTP status code behavior confirmed across Apache, Nginx, and Cloudflare.