does anyone know why i cant add my database even though it has sslmode set to require? ``` Failed

does anyone know why i cant add my database even though it has sslmode set to require?

  Failed to connect to the provided database: TLS handshake failed
  [SSLV3_ALERT_HANDSHAKE_FAILURE] [HANDSHAKE_FAILURE_ON_CLIENT_HELLO] [code: 2015]

  Failed to connect to the provided database: TLS handshake failed
  [SSLV3_ALERT_HANDSHAKE_FAILURE] [HANDSHAKE_FAILURE_ON_CLIENT_HELLO] [code: 2015]

  Failed to connect to the provided database: TLS handshake failed
  [SSLV3_ALERT_HANDSHAKE_FAILURE] [HANDSHAKE_FAILURE_ON_CLIENT_HELLO] [code: 2015]

  Failed to connect to the provided database: TLS handshake failed
  [SSLV3_ALERT_HANDSHAKE_FAILURE] [HANDSHAKE_FAILURE_ON_CLIENT_HELLO] [code: 2015]

Eella does anyone know why i cant add my database even though it has sslmode set to re...

AJR•8/15/25, 6:03 PM

Local dev, or deployed?

AAJR Local dev, or deployed?

ellaOP•8/15/25, 6:14 PM

well im getting the same error in the dashboard, when i run

npx wrangler hyperdrive create testingdb --connection-string="postgres://postgres:pgpassword@iphere:5432/postgres"

npx wrangler hyperdrive create testingdb --connection-string="postgres://postgres:pgpassword@iphere:5432/postgres"

Eella does anyone know why i cant add my database even though it has sslmode set to re...

AJR•8/15/25, 6:50 PM

Looks like you're probably running some custom curve for TLS? On Coolify, maybe?

AAJR Looks like you're probably running some custom curve for TLS? On Coolify, maybe?

ellaOP•8/15/25, 7:10 PM

i am using coolify

Eella i am using coolify

AJR•8/15/25, 7:35 PM

Assuming you're using their automatically configured SSL, it is not currently supported on Hyperdrive. See the below issue for details.

https://github.com/cloudflare/workers-sdk/issues/8671

GitHub

🐛 BUG: Cannot connect to Hyperdrive from Coolify PostgreSQL Data...

Which Cloudflare product(s) does this pertain to? Other What versions are you using? 4.4.0 [Wrangler], 16.8 [PostgreSQL] What operating system and version are you using? Windows 10 21H2 (Wrangler) ...

AAJR Assuming you're using their automatically configured SSL, it is not currently su...

ellaOP•8/15/25, 7:39 PM

what curves are supported?

ellaOP•8/15/25, 7:39 PM

would prime256 be suitable?

AJR•8/15/25, 7:40 PM

Currrently we support the default curves on pg 14-17. So, ssl_ecdh_curve=prime256v1ssl_ecdh_curve=prime256v1 is supported. Assuming that's the one you mean, yes it works.

letincho5•8/18/25, 1:16 PM

My project uses Drizzle + Hyperdrive + Neon. The last week start to appears this message: "Timed out while waiting for a message from the origin database". I think is a Hyperdrive message. Are there any place to see hyperdrive logs?

Hyperdrive is configured with the pool's connection string of Neon, is it right?
I've trierd Drizzle client with and without a PgNeon Pool --> in both cases, some time I get the error (is not deterministic)
Any ideas?

Lletincho5 My project uses Drizzle + Hyperdrive + Neon. The last week start to appears this...

AJR•8/18/25, 1:51 PM

Hello. Confirmed, that's a Hyperdrive error message. It is thrown when a query is sent to the origin database, but no response is received for 60 seconds.

Lletincho5 My project uses Drizzle + Hyperdrive + Neon. The last week start to appears this...

AJR•8/18/25, 1:53 PM

This timeout was added about a month ago. If you are seeing it regularly, I can adjust it upwards for you in our next release. I will note that 60s is a fairly long time, so I would recommend confirming that everything is performing as expected from your origin DB before requesting this. Happy to do it, though, just let me know and please provide the Hyperdrive IDs for which you would like this increase.

letincho5•8/18/25, 1:56 PM

Ok, thanks for the answer. I guess that the Neon inactivity after 5 minutes... may affect too, no? The Neon wake-up times, may throw this error too?

Lletincho5 Ok, thanks for the answer. I guess that the Neon inactivity after 5 minutes... m...

AJR•8/18/25, 1:56 PM

If their cold starts delay responses past the 60 second mark, that could cause this, yes. I haven't personally witnessed that, but it's certainly possible in theory.

letincho5•8/18/25, 1:57 PM

Oki, this is my actual configuration:

letincho5•8/18/25, 1:58 PM

I've better results with this, than without Pool config... but, in threory, is neccesary?

AJR•8/18/25, 2:00 PM

The only thing the Pool struct will do is to allow multiple parallel queries within a given Worker request. If that's something that's helpful for your use case, then I'd say go for it. Depends entirely on your situation.

The only caveat I'd add is that you want to limit it to 5 max, as it'll fail if you pass the 6 egress connection limit within a Worker request. It may deadlock, as observed by some other users in this channel.

letincho5•8/18/25, 2:02 PM

Yes, perfect... thanks!

James•8/18/25, 5:35 PM

Can you share your code or repo? Does it happen without hyperdrive (I would asssume yes)? This looks more like a code-specific issue so might make more sense in #workers-help

Isaac McFadyen•8/18/25, 6:36 PM

Are you using a pg Pool by chance? You'll need to set a max connection limit of 5 if so.

Isaac McFadyen•8/18/25, 6:36 PM

Unsure if related but that's one thing to double-check

JJustSomeDev trying to setup hyperdrive with astro, but when I add pg it does this, anyone kn...

AJR•8/18/25, 7:22 PM

Are you explicitly closing your connection (e.g. sql.end()sql.end())
Are you using waitUntilwaitUntil to do so, or for anything else in your script?

AJR•8/18/25, 7:26 PM

Hmmm. Let me ask internally.

Looks like you're still trying to iron out whether this happens without Hyperdrive, just a normal TCP connect?

AJR•8/18/25, 7:35 PM

I'm afraid I'm probably not going to be much help without a simpler repro.

I've confirmed we're still operating as expected globally. I'm not familiar with Astro.

AJR•8/18/25, 7:35 PM

If you have a hypedrive ID I can take a look at our logs and metrics for you specifically and see if anything interesting pops up.

JJustSomeDev sure will dm the staging I'm working with atm, I don't even think its being hit

AJR•8/18/25, 7:44 PM

Confirmed, no traffic is reaching Hyperdrive for your config this month.

does anyone know why i cant add my database even though it has sslmode set to require? ``` Failed

Similar Threads