X-Forwarded-For
header field to pass user's real IP address for origin-pull by default.X-Forwarded-For
field is different from the user's real IP address, it may be caused by the following factors and can be solved in the following ways: Cause | Scope of Affection | Other Characteristics | Solution |
The user uses a proxy server for access | Specific users | The IP obtained when the user directly accesses the origin server is also exceptional | This problem is on the client. Cancel proxy or allow getting the proxy server IP |
The origin server load balancer modifies the header | All users | The obtained IP is the ECDN intermediate node IPThe user can directly access the origin server normally | Modify the origin server load balancer configuration, but do not modify the content of `X-Forwarded-For` |
User access is hijacked | Users in specific regions | The obtained HTTP request IP is exceptionalThe obtained HTTPS request IP is normal | Submit a ticket for assistance |
Node features are exceptional | Users in specific regions or ISPs | The IP obtained when the user directly accesses the origin server is normal |
Status Code | Cause | Solution |
404 | The content requested by the user does not exist on or has been deleted from the origin server | Check whether the requested content exists on the origin server or modify the request link. |
| The domain name acceleration service has not been enabled, or the domain name has not been connected to ECDN | Connect the domain name to ECDN and enable the acceleration service. |
522 | The content of origin server's response is invalid | The content of the origin server's response obtained by the node is incomplete or is in an incompatible format. You can submit a ticket for assistance. |
513 | Access requests from a certain region surge and are therefore blocked | Access requests from a certain region surge, which are suspected as attack traffic and automatically blocked by the platform. If you are sure that they are not attack traffic, you can submit a ticket to apply for canceling the access limit. |
529 | The domain name is newly added, and the route configuration has not taken effect | It takes 5–10 minutes for the platform to deploy the configuration. Please confirm that the configuration has taken effect before switching the CNAME resolution. |
| The ping command is blocked by the origin server, and the origin-pull route information cannot be obtained | You need to grant the ping permission on your ECDN intermediate nodes. You can submit a ticket to get the list of IPs of ECDN intermediate nodes. |
538 | SSL handshake between the node and origin server fails | Generally, this problem is caused by origin server network, SSL protocol, or algorithm incompatibility. You can submit a ticket for assistance. |
564 | HTTPS origin-pull connection is closed due to exception | If the 564 error occurs for a high number of requests on the ECDN platform, it is generally caused by node egress network exceptions. If the 564 error occurs on certain origin servers, it is generally caused by egress network exceptions of your origin servers. |
Other errors | Troubleshoot based on the specific error message | Check whether the error status code is a response from the origin server. |