$100USD Bounty - Dozens of HTTP 522 error. Everything loading so slow from the internet

[plantsandbinary]

I'm running an Unraid server with a couple of containers: plex, heimdall, deluge, etc.

I'm using Nginxproxymanager container on Unraid to expose these to the web, handle SSL and to access them with my own domain. I have Cloudfare set up as my site's DNS provider.

 

Whenever I try to browse to eg. *https://deluge.mysite.tld*

I get a whole bunch of 522 timeout errors. Most of the page resources like .css, html, etc. all load fine immediately but for some reason the **images** and other resources just take forever to load, or never load at all.

 

Here is an example: https://imgur.com/a/ONr17kC

 

My lab setup is pretty simple.

 

Router (AX88U) > Dual Gig Ethernet > Unraid Homelab > Containers (eg. deluge, plex, etc).

 

Here's the router settings: https://imgur.com/a/yp72dc2

 

The only thing I've changed on my router was the DNS. I changed to Adblock DNS just so I could block most ads on my home network without any extra fanciness.

 

I have a pretty decent homelab and 1gig fiber connection. So it's weird that I am getting these timeout errors.

    Model:    Custom
    M/B:    ASRock X570M Pro4 Version - s/n: M80-XXXXXXXXXXXXX
    BIOS:    American Megatrends Inc. Version P3.70. Dated: 02/23/2022
    CPU:    AMD Ryzen 5 5600 6-Core @ 3500 MHz
    HVM:    Enabled
    IOMMU:    Enabled
    Cache:    384 KiB, 3 MB, 32 MB
    Memory:    16 GiB DDR4 Multi-bit ECC (max. installable capacity 128 GiB)
    Network:    bond0: fault-tolerance (active-backup), mtu 1500
    Kernel:    Linux 5.19.17-Unraid x86_64
    OpenSSL:    1.1.1s
    Uptime:    59 days, 3 hours, 20 minutes

I'd appreciate any ideas on where I should start to debug this issue.

Edited May 10, 2023 by plantsandbinary
offering a $100 USD PayPal bounty to whoever has the solution to this issue

[plantsandbinary]

Anyone at all?

[plantsandbinary]

I still haven't managed to figure this out at all.

[Tomo82]

Can you see if [*.mysite.TLD] is blacklisted in Adblock DNS? What happens if you change the DNS back to previous setting or alternate Adblocking DNS provider? Or just fire up Adguard Home/Pi Hole as docker and set that as the DNS provider in your router.

[plantsandbinary]

Sorry, I didn't see this reply. Kind of gave up hope that someone could help.

 

I checked this: https://www.dnsbl.info/dnsbl-database-check.php

 

My IP isn't listed at all. So I don't think it's in any blacklist. The domain and TLD combo is brand-new. It's only been registered one month and has never been used or registered before from what I could see. It's a pretty unique domain and tld also.

 

I changed my router DNS back to <blank> and told it to use my ISPs DNS. I still get the same problem.

 

Do you have any other ideas? I was getting support from Cloudfare but they stopped responding... as I said it only seems to be images and other things on the server which is so weird. I'm using Cloudfare explicitly because I like that they proxy my IP so I don't need to give away my home IP.

[plantsandbinary]

I am adding a bunch of images here to show my current setup, it should be super basic and nothing out of the ordinary at all:

 

1. LAN and WAN DNS pages on my router = Blank/use ISPs

2. NginxProxyManager Portforward for: 2086 (HTTP) and 2087 (HTTPS) [both these ports are accepted when proxying your connection in Cloudfare]

3. All my Docker containers on a separate network called "Public" which I made via one of the Youtube SpaceInvaderOne videos

4. Cloudfare set up as my site's DNS with all of my subdomains and host domain proxied through Cloudfare.

5. I am still getting the Cloudfare HTTP 522 errors on images etc. on my site... the weird thing is that they do load and a few refreshes of the page will generally make things work but something super weird is going on.

 

I'll now PayPal the person who has the solution which fixes this issue $100 USD.

 

Edited May 10, 2023 by plantsandbinary

[plantsandbinary]

Here's some more information because I am serious about getting this fixed:

 

An example of resources that failed to load.

 

 

A more deep example of the request:

 

Proof that it's the "waiting for server" issue. So some Firewall problem, but where?

 

Some of the images loaded, some did not? Why?

 

This shows that it's text/html requests which are being blocked. Websocket requests and direct image requests seem to be fine?

 

Same problem on Firefox btw, so it's not Chrome.

 

Here's the plain request preview, so this is the response it's getting:

Edited May 10, 2023 by plantsandbinary

[plantsandbinary]

I'm still offering a cash bounty for this.

 

The problem does not occur if I don't proxy a url through Cloudfare but then I am exposing my IP address.

Edited May 27, 2023 by plantsandbinary

[Kilrah]

What's your SSL/TLS setting for the domain on cloudflare? You probably don't want Full(strict).

Aternatively it seems you're using a custom certificate that's for "*.xtu.icu" but it seems cloudflare won't consider it valid if it doesn't also include the root "xtu.icu".

Edited May 28, 2023 by Kilrah