Origin is unreachable 523

Reference guide

Is your origin's DNS record / IP address definitely correct and pointing at a live server?

Yes, DNS/IP looks correct

Request path

  1. You (reached)
  2. DNS (reached)
  3. Cloudflare edge (reached)
  4. Origin (not reached)

unreachable

Cloudflare cannot reach your origin at the network level, even though the DNS/IP configuration looks correct.

What to do

  1. Check. Confirm your origin's firewall/security group allows inbound traffic from Cloudflare's published IP ranges on the relevant port.
  2. Fix. Add or correct the firewall rule allowing Cloudflare's IP ranges.
    curl https://www.cloudflare.com/ips-v4
curl https://www.cloudflare.com/ips-v6
  3. Verify. Retry the request through Cloudflare and confirm it now reaches your origin.

Not sure / might be wrong

Request path

  1. You (reached)
  2. DNS (reached)
  3. Cloudflare edge (reached)
  4. Origin (not reached)

unreachable

Your DNS record in Cloudflare may be pointing at an IP address that no longer has a live server behind it.

What to do

  1. Check. In the Cloudflare DNS dashboard, confirm the A/AAAA record for this hostname points at your current, live origin IP.
  2. Fix. Update the DNS record to the correct origin IP address.
  3. Verify. Wait for DNS propagation, then retry the request through Cloudflare.

Want to narrow it down interactively instead? Use the error lookup tool.