SSL for SaaS: Users are getting status 522 error responses
We are using SSL for SaaS and had some users reach out today because they are getting status 522 error responses. It seems to happen when a user is using Cloudflare to manage their domain and then connects a subdomain to our service through the SSL for SaaS Cloudflare product. This worked fine before, so I was wondering if there is some incident currently happening that could be responsible for this issue?
15 Replies
Do you have an exact time when these issues started?
And also a URL where we can try to reproduce?
I don't have an exact time when it started, the first user reported it 14 hours ago and then another one reported it 2 hours ago.
I also did an investigation myself by creating a second Cloudflare account and then connecting a subdomain from there to our main Cloudflare Account through SSL for SaaS. I was able to reproduce the problem when the subdomain was set to "Proxied". The problem seemed to not happen anymore when I changed it from "Proxied" to "DNS Only", so I adviced the users to also change their subdomains to "DNS Only" for now.
The subdomain where I could reproduce the problem was this one here: https://portal.schmidt-soll-bleiben.de/
(But at the moment I set that subdomain to "DNS Only")
These status 522 requests seemed to happen about 1 in 20 times. So it was a bit flacky.
Do you have any domain that you can change to proxied now without too many issues for your customers? Or can I add one of my domains maybe to reproduce?
yes, wait a second
Also, do you log RayIDs on your server? Would be cool if you could check how your server responded to a request that filed.
okay, I changed my test subdomain to Proxied => https://portal.schmidt-soll-bleiben.de/
username: [email protected]
pw: cloudflare1234_
I don't think I log RayIDs atm
if you log in and check the in the browser console, you'll see that some requests respond with status 522
I'll try a few request without logging in first
ok 👍
without logging in i also get the error, but i have to reload the browser a couple of times
I've made a few requests to https://portal.schmidt-soll-bleiben.de/laudian(n)
Can you find the logs for the request to https://portal.schmidt-soll-bleiben.de/laudian29 ? That was a 522
Would be nice to see if the request even mad eit to your server.
I'll check
might take a few minutes
No worries. I just noticed I reran the test once because I forgot somethign though, so I tried /laudian29 twice ~.~ The one that's a 522 was at date: Fri, 28 Feb 2025 17:44:45 GMT
okay, so the status 522 requests indeed don't even seem to reach the "server" (the cloudflare account which uses SSL for SaaS). I see your other requests in those logs, where the server responds with 404
ok, ty! I'll ask someone to take a look
thank you 🙏