It wouldn't 502 though, would potentially be a bit slower but that's all

EEduardo Hello, I'm having issues with my website, throwing 502 bad gateway, but connecti...

C

ChaikaOP•3/6/24, 4:57 PM

502 is different then what he got. He got a 522.
Are you using CF Tunnels at all?

CChaika It wouldn't 502 though, would potentially be a bit slower but that's all

P

Peps•3/6/24, 4:57 PM

ah I read over the error part

CChaika 502 is different then what he got. He got a 522. Are you using CF Tunnels at all...

E

Eduardo•3/6/24, 4:57 PM

Sorry, 520

C

ChaikaOP•3/6/24, 4:58 PM

520 is also different then what he got. and neither of those are bad gateway errors, only 502 is

PPeps I see one Cloudflare colo in Canada that's rerouting traffic, could potentially ...

E

Eduardo•3/6/24, 4:59 PM

Let me check.

E

Eduardo•3/6/24, 4:59 PM

Yes, I got 522, sorry. Connection timeout error. I'm having this issue since two days ago.

E

Eduardo•3/6/24, 5:00 PM

Country:Canada
State/Region:Quebec
City:Montreal

E

Eduardo•3/6/24, 5:01 PM

Now website is working fine, but I don't know how to keep track of these incidents to know when it gets fixed.

E

Eduardo•3/6/24, 5:04 PM

This is the error I'm having now

E

Eduardo•3/6/24, 5:04 PM

Website was working fine 5 minutes ago

E

Eduardo•3/6/24, 5:08 PM

And now it's working fine again, not sure what's causing the issue

EEduardo This is the error I'm having now

I

Isaac McFadyen•3/6/24, 5:34 PM

So this is not a Cloudflare issue, the DC being rerouted is simply coincidence. This indicates that for some reason your webserver (not cloudflare) is returning an error. You should check the logs on your webserver if you can, they likely have the root cause listed in them somewhere.

IIsaac McFadyen So this is not a Cloudflare issue, the DC being rerouted is simply coincidence. ...

E

Eduardo•3/6/24, 6:10 PM

I checked several times, nothing changed in my apache configuration, it suddenly started happening since yesterday without changing anything. I checked the logs and there is nothing weird.

E

Eduardo•3/6/24, 6:12 PM

Now it throws 502. And it was throwing the timeout error too

I

Isaac McFadyen•3/6/24, 6:14 PM

Do you have a firewall in front of the Apache instance that might be blocking things? 502 generally sounds like there's an issue with Apache or whatever's behind Apache though.

F

Firecuba™ (Shoresy)•3/6/24, 6:24 PM

Starting to love Cloudflare more and more!

FFirecuba™ (Shoresy)Starting to love Cloudflare more and more!

V

Vero•3/6/24, 6:27 PM

coool, any specific reason why

?

Z

Zybyr•3/6/24, 6:30 PM

when using proxied domains in dns manager, my website running nginx does not load. It loads only with "dns only" option. What can I do on the nginx server end to get it to load?

C

ChaikaOP•3/6/24, 6:32 PM

Well, what's the error, exactly?

Z

Zybyr•3/6/24, 6:37 PM

and now its loading ... wtf

IIsaac McFadyen Do you have a firewall in front of the Apache instance that might be blocking th...

E

Eduardo•3/6/24, 6:38 PM

No, I don't have any firewall, that's why i'm asking

CChaika Well, what's the error, exactly?

Z

Zybyr•3/6/24, 6:46 PM

GET https://wings.vmlx.org:4437/api/system net::ERR_CONNECTION_TIMED_OUT

Z

Zybyr•3/6/24, 6:46 PM

started getting the error again after server reboot

ZZybyr GET https://wings.vmlx.org:4437/api/system net::ERR_CONNECTION_TIMED_OUT

C

ChaikaOP•3/6/24, 6:47 PM

Cloudflare Proxy doesn't support that port
https://developers.cloudflare.com/fundamentals/reference/network-ports/

Cloudflare Docs

Network ports · Cloudflare Fundamentals docs

Learn which network ports Cloudflare proxies by default and how to enable Cloudflare’s proxy for additional ports.

C

ChaikaOP•3/6/24, 6:47 PM

you'd want to change it to a supported one, or if that wings subdomain is entirely just for that, you could make an Origin Rule overriding to that port (but you'd connect on 443 and it'd just connect to your origin on 4437)

Z

Zybyr•3/6/24, 6:49 PM

@Chaika thanks for pointing this out. How about port 8443? Is it supported by default?

C

ChaikaOP•3/6/24, 6:49 PM

yea it's on that list there. Not supported for caching though

Z

Zybyr•3/6/24, 6:51 PM

with port 8843 i'm getting

Access to XMLHttpRequest at 'https://wings.vmlx.org:8443/api/system' from origin 'https://ptero.vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
jquery.min.js?t={cache-version}:4 
        
        
       GET https://wings.vmlx.org:8443/api/system net::ERR_FAILED

Access to XMLHttpRequest at 'https://wings.vmlx.org:8443/api/system' from origin 'https://ptero.vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
jquery.min.js?t={cache-version}:4 
        
        
       GET https://wings.vmlx.org:8443/api/system net::ERR_FAILED

Access to XMLHttpRequest at 'https://wings.vmlx.org:8443/api/system' from origin 'https://ptero.vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
jquery.min.js?t={cache-version}:4 
        
        
       GET https://wings.vmlx.org:8443/api/system net::ERR_FAILED

Access to XMLHttpRequest at 'https://wings.vmlx.org:8443/api/system' from origin 'https://ptero.vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
jquery.min.js?t={cache-version}:4 
        
        
       GET https://wings.vmlx.org:8443/api/system net::ERR_FAILED

C

ChaikaOP•3/6/24, 6:52 PM

I get web server is down, most likely meaning wings is not listening/recieving on that port

Z

Zybyr•3/6/24, 6:55 PM

its working now

Z

Zybyr•3/6/24, 6:55 PM

thanks Chaika!

R

Rapid•3/6/24, 7:55 PM

How can I remove someone who got banned from my ratelimiting rule automatically?

R

Rapid•3/6/24, 7:56 PM

It is a legit user that I want to remove the block right now

Z

Zybyr•3/6/24, 7:58 PM

how can I get this policy fixed?

nodes:1 Access to XMLHttpRequest at 'https://wings.vmlx.org:8443/api/system' from origin 'https://vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The 'Access-Control-Allow-Origin' header has a value 'https://ptero.vmlx.org' that is not equal to the supplied origin.

nodes:1 Access to XMLHttpRequest at 'https://wings.vmlx.org:8443/api/system' from origin 'https://vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The 'Access-Control-Allow-Origin' header has a value 'https://ptero.vmlx.org' that is not equal to the supplied origin.

nodes:1 Access to XMLHttpRequest at 'https://wings.vmlx.org:8443/api/system' from origin 'https://vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The 'Access-Control-Allow-Origin' header has a value 'https://ptero.vmlx.org' that is not equal to the supplied origin.

nodes:1 Access to XMLHttpRequest at 'https://wings.vmlx.org:8443/api/system' from origin 'https://vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The 'Access-Control-Allow-Origin' header has a value 'https://ptero.vmlx.org' that is not equal to the supplied origin.

RRapid How can I remove someone who got banned from my ratelimiting rule automatically?

E

Erisa•3/6/24, 7:58 PM

Add the IP to IP Access Rules as "Allow" and they will bypass every security feature on your zone including the existing applied RL block

E

Erisa•3/6/24, 7:59 PM

Its under Security > WAF > Tools

ZZybyr how can I get this policy fixed? ```cs nodes:1 Access to XMLHttpRequest at 'htt...

C

ChaikaOP•3/6/24, 8:09 PM

something within ptero/your wings config itself. It seems to think ptero is at

ptero

ptero

subdomain, not at root

C

ChaikaOP•3/6/24, 8:09 PM

Well, you could potentially use a Transform Rule to override it, but it'd probably be best to fix the root issue

Z

Zybyr•3/6/24, 8:10 PM

the error and problem happens only when I use vmlx.org instead of ptero.vmlx.org in the browser

C

ChaikaOP•3/6/24, 8:13 PM

You have pterodactyl setup on two different hostnames, it seems?

C

ChaikaOP•3/6/24, 8:13 PM

Why not just pick one (ex: ptero) and redirect? Or pick root, change config, and redirect from the ptero subdomain

Z

Zybyr•3/6/24, 8:14 PM

you are right, let me try to only use one

Z

Zybyr•3/6/24, 8:18 PM

switched to one hostname. How to redirect?

Z

Zybyr•3/6/24, 8:19 PM

Access to XMLHttpRequest at 'https://ptero.vmlx.org:8443/api/system' from origin 'https://vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The 'Access-Control-Allow-Origin' header has a value 'https://ptero.vmlx.org' that is not equal to the supplied origin.

Access to XMLHttpRequest at 'https://ptero.vmlx.org:8443/api/system' from origin 'https://vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The 'Access-Control-Allow-Origin' header has a value 'https://ptero.vmlx.org' that is not equal to the supplied origin.

Access to XMLHttpRequest at 'https://ptero.vmlx.org:8443/api/system' from origin 'https://vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The 'Access-Control-Allow-Origin' header has a value 'https://ptero.vmlx.org' that is not equal to the supplied origin.

Access to XMLHttpRequest at 'https://ptero.vmlx.org:8443/api/system' from origin 'https://vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The 'Access-Control-Allow-Origin' header has a value 'https://ptero.vmlx.org' that is not equal to the supplied origin.

!

! EpickyHrac•3/6/24, 8:20 PM

how make cloudflare waf rule Expression for,
that for all DENY access to https://zl.epik.tk/* but https://zl.epik.tk/u/* ALLOW access for all? please help

Z

Zybyr•3/6/24, 8:21 PM

reading documentation on how to redirect ..

ZZybyr switched to one hostname. How to redirect?

C

ChaikaOP•3/6/24, 8:22 PM

which one did you pick, the root