Error map

1001 Cloudflare Error 1001: DNS resolution error

Cloudflare · layer 3, Edge & web server

Open the full error page →

Centre: this error. First ring: errors it is linked with (12). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.

1001 — Cloudflare Error 1001: DNS resolution error (Cloudflare)1001lookup registry-1.docker.io: no such host — dial tcp: lookup registry-1.docker.io: no such host / Temporary failure in name resolution during docker build (Docker)lookup registry-1.d…cURL error 6 — cURL error 6: Could not resolve host: api.example.com (PHP)cURL error 6ENOTFOUND — Error: getaddrinfo ENOTFOUND host / Name or service not known (API)ENOTFOUNDENOTFOUND — npm ERR! code ENOTFOUND — request to https://registry.npmjs.org/x failed, reason: getaddrinfo ENOTFOUND registry.npmjs.org (npm)ENOTFOUNDUnknownHostException — java.net.UnknownHostException: api.example.com (Java)UnknownHostExceptionsecretOrPrivateKey must have a value — Error: secretOrPrivateKey must have a value (jsonwebtoken sign) (Authentication)secretOrPrivateKey …Could not resolve host — fatal: unable to access 'https://github.com/…': Could not resolve host: github.com (Git)Could not resolve h…sudo: unable to resolve host — sudo: unable to resolve host <hostname>: Name or service not known (Linux)sudo: unable to res…Temporary failure in name resolution — ping: google.com: Temporary failure in name resolution (Linux)Temporary failure i…530 — Cloudflare HTTP 530 (with Error 1016 Origin DNS error / 1033 tunnel error) (Cloudflare)5301002 — Cloudflare Error 1002: DNS points to Prohibited IP / Restricted (Cloudflare)10021003 — Cloudflare Error 1003: Direct IP access not allowed (Cloudflare)1003ECONNREFUSED — Error: connect ECONNREFUSED 127.0.0.1:5432 (Node.js)ECONNREFUSED408 — HTTP 408 Request Timeout (HTTP)408Failed to fetch — TypeError: Failed to fetch / NetworkError when attempting to fetch resource (JavaScript)Failed to fetchSocketException reset — java.net.SocketException: Connection reset (Java)SocketException res…body already used — TypeError: Failed to execute 'json' on 'Response': body stream already read (JavaScript)body already usedcURL error 28 — cURL error 28: Operation timed out after 30001 milliseconds with 0 bytes received (PHP)cURL error 28daemon — Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running? (Docker)daemonearly EOF — fatal: early EOF — fatal: index-pack failed (Git)early EOFConnectException — java.net.ConnectException: Connection refused (Java)ConnectExceptionETIMEDOUT — API Request Timed Out (ETIMEDOUT / ReadTimeout / timeout of 30000ms exceeded) (API)ETIMEDOUTECONNRESET — Error: socket hang up / read ECONNRESET (API)ECONNRESETnpm ETIMEDOUT — npm ERR! code ETIMEDOUT — network request to https://registry.npmjs.org/x failed, reason: connect ETIMEDOUT (npm)npm ETIMEDOUTtlsv1 alert protocol version — SSL error: tlsv1 alert protocol version / unsupported protocol / no protocols available (API)tlsv1 alert protoco…Pending validation — ACM certificate stuck in Pending validation (AWS)Pending validation1000 — Cloudflare Error 1000: DNS points to prohibited IP (Cloudflare)1000413 — HTTP 413 Content Too Large (Request Entity Too Large) (HTTP)413TokenExpiredError — JWT Expired / Invalid Token (Authentication)TokenExpiredErrorCreateContainerConfigError — Kubernetes: CreateContainerConfigError — secret / configmap not found (Kubernetes)CreateContainerConf…407 — HTTP 407 Proxy Authentication Required (HTTP)407RPC failed — error: RPC failed; HTTP 400 curl 22 / curl 92 HTTP/2 stream was not closed cleanly — the remote end hung up unexpectedly (Git)RPC failedsubmodule url — fatal: No url found for submodule path 'x' in .gitmodules (Git)submodule urlsudoers — user is not in the sudoers file. This incident will be reported. (Linux)sudoersapi_version_invalid — API Error: Invalid or unsupported API version (API)api_version_invalidfeature_not_enabled — API Error: Feature not enabled for this account (feature_not_enabled / not available on your plan) (API)feature_not_enabledFailed to download metadata for repo — Error: Failed to download metadata for repo 'appstream' (dnf / yum) (Linux)Failed to download …Network is unreachable — connect: Network is unreachable (ENETUNREACH) (Linux)Network is unreacha…No route to host — connect: No route to host (EHOSTUNREACH) (Linux)No route to host523 — Cloudflare Error 523: Origin is unreachable (Cloudflare)5231016 — Cloudflare Error 1016: Origin DNS error (Cloudflare)10161033 — Cloudflare Error 1033: Argo Tunnel error (Cloudflare Tunnel not connected) (Cloudflare)1033ERR_NAME_NOT_RESOLVED — net::ERR_NAME_NOT_RESOLVED (This site can't be reached — server IP address could not be found) (JavaScript)ERR_NAME_NOT_RESOLV…DNS in pod — DNS not working inside a Kubernetes pod (could not resolve host / nslookup: can't resolve) (Kubernetes)DNS in pod1004 — Cloudflare Error 1004: Host Not Configured to Serve Web Traffic (Cloudflare)10041013 — Cloudflare Error 1013: HTTP hostname and TLS SNI hostname mismatch (Cloudflare)10131014 — Cloudflare Error 1014: CNAME Cross-User Banned (Cloudflare)10141023 — Cloudflare Error 1023: Could not find host (Cloudflare)1023

Directly related (12)

lookup registry-1.docker.io: no such hostDocker

dial tcp: lookup registry-1.docker.io: no such host / Temporary failure in name resolution during docker build

DNS isn’t working for the Docker daemon or inside build containers, so pulls and package downloads fail.

cURL error 6PHP

cURL error 6: Could not resolve host: api.example.com

PHP cURL couldn’t resolve the hostname via DNS.

ENOTFOUNDAPI

Error: getaddrinfo ENOTFOUND host / Name or service not known

DNS lookup for the hostname failed — the name is wrong, doesn’t exist, or this machine can’t resolve it.

ENOTFOUNDnpm

npm ERR! code ENOTFOUND — request to https://registry.npmjs.org/x failed, reason: getaddrinfo ENOTFOUND registry.npmjs.org

npm couldn’t resolve the registry hostname.

UnknownHostExceptionJava

java.net.UnknownHostException: api.example.com

DNS resolution failed for the hostname.

secretOrPrivateKey must have a valueAuthentication

Error: secretOrPrivateKey must have a value (jsonwebtoken sign)

jwt.sign() got an empty secret — the environment variable holding the JWT secret isn’t loaded.

Could not resolve hostGit

fatal: unable to access 'https://github.com/…': Could not resolve host: github.com

DNS lookup for the Git host failed from this machine.

sudo: unable to resolve hostLinux

sudo: unable to resolve host <hostname>: Name or service not known

The machine’s hostname isn’t in /etc/hosts (or DNS), so sudo prints this warning — usually after changing the hostname.

Temporary failure in name resolutionLinux

ping: google.com: Temporary failure in name resolution

The Linux host can’t resolve domain names — no working DNS server is configured or reachable.

530Cloudflare

Cloudflare HTTP 530 (with Error 1016 Origin DNS error / 1033 tunnel error)

Cloudflare returns 530 together with a 1xxx error; the 1xxx code (usually 1016 or 1033) tells you the real cause.

1002Cloudflare

Cloudflare Error 1002: DNS points to Prohibited IP / Restricted

A record points to a private, reserved or Cloudflare IP that Cloudflare won’t proxy to.

1003Cloudflare

Cloudflare Error 1003: Direct IP access not allowed

The request went to a Cloudflare IP address directly (or with a Host header for a domain not on Cloudflare).

Two steps away (36)

ECONNREFUSEDNode.js

Error: connect ECONNREFUSED 127.0.0.1:5432

Nothing is listening at that host:port — the target service is down or you’re connecting to the wrong address.

408HTTP

HTTP 408 Request Timeout

The server closed the connection because the client took too long to send the complete request.

Failed to fetchJavaScript

TypeError: Failed to fetch / NetworkError when attempting to fetch resource

The browser couldn’t complete the request at the network level — CORS, DNS, offline, blocked mixed content, or the server refused…

SocketException resetJava

java.net.SocketException: Connection reset

The remote side closed the TCP connection abruptly while Java was reading or writing.

body already usedJavaScript

TypeError: Failed to execute 'json' on 'Response': body stream already read

A fetch Response body was consumed twice (e.g. calling .text() then .json()).

cURL error 28PHP

cURL error 28: Operation timed out after 30001 milliseconds with 0 bytes received

A PHP cURL (or Guzzle) request timed out before the remote server answered.

daemonDocker

Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?

The docker CLI can’t talk to the Docker engine — it isn’t running, or your user can’t access the socket.

early EOFGit

fatal: early EOF — fatal: index-pack failed

A clone or fetch was cut off mid-transfer.

ConnectExceptionJava

java.net.ConnectException: Connection refused

Nothing is listening at the host:port the Java client connected to.

ETIMEDOUTAPI

API Request Timed Out (ETIMEDOUT / ReadTimeout / timeout of 30000ms exceeded)

The client gave up waiting — either for the connection to open or for the response to arrive.

ECONNRESETAPI

Error: socket hang up / read ECONNRESET

The other side closed the TCP connection abruptly while your client was still using it.

npm ETIMEDOUTnpm

npm ERR! code ETIMEDOUT — network request to https://registry.npmjs.org/x failed, reason: connect ETIMEDOUT

npm couldn’t reach the registry in time — network, proxy or firewall issue.

tlsv1 alert protocol versionAPI

SSL error: tlsv1 alert protocol version / unsupported protocol / no protocols available

The client and server couldn’t agree on a TLS version or cipher, so the HTTPS handshake failed before any HTTP was exchanged.

Pending validationAWS

ACM certificate stuck in Pending validation

ACM is waiting to see the DNS (or email) validation record — it wasn’t created, was created in the wrong DNS zone, or has a typo.

1000Cloudflare

Cloudflare Error 1000: DNS points to prohibited IP

A proxied DNS record points at a Cloudflare IP address, creating a loop.

413HTTP

HTTP 413 Content Too Large (Request Entity Too Large)

The request body is bigger than the server is willing to accept — usually a file upload over the configured limit.

TokenExpiredErrorAuthentication

JWT Expired / Invalid Token

The JSON Web Token sent with the request is expired, malformed or signed with a different key, so the API rejects it (usually wit…

CreateContainerConfigErrorKubernetes

Kubernetes: CreateContainerConfigError — secret / configmap not found

Kubernetes can’t build the container’s configuration — usually a referenced Secret, ConfigMap or key doesn’t exist in that namesp…

407HTTP

HTTP 407 Proxy Authentication Required

A proxy between you and the server requires credentials before it will forward your request.

RPC failedGit

error: RPC failed; HTTP 400 curl 22 / curl 92 HTTP/2 stream was not closed cleanly — the remote end hung up unexpectedly

A large HTTPS push/clone broke mid-transfer — size limits, proxies or flaky HTTP/2.

submodule urlGit

fatal: No url found for submodule path 'x' in .gitmodules

A submodule entry exists in the index but its URL is missing from .gitmodules.

sudoersLinux

user is not in the sudoers file. This incident will be reported.

Your account isn’t allowed to use sudo.

api_version_invalidAPI

API Error: Invalid or unsupported API version

The API version you requested — in the URL, a header or the SDK config — doesn’t exist or has been retired.

feature_not_enabledAPI

API Error: Feature not enabled for this account (feature_not_enabled / not available on your plan)

The endpoint or option exists, but your account, plan, region or project hasn’t been granted access to it.

Failed to download metadata for repoLinux

Error: Failed to download metadata for repo 'appstream' (dnf / yum)

dnf/yum can’t fetch a repository’s metadata — the mirror is unreachable, the repo URL is dead (CentOS 8 EOL), or there’s a DNS/pr…

Network is unreachableLinux

connect: Network is unreachable (ENETUNREACH)

The host has no route to the destination network — no default gateway, interface down, or trying IPv6 without IPv6 connectivity.

No route to hostLinux

connect: No route to host (EHOSTUNREACH)

The destination host isn’t reachable — it’s down, on another subnet without routing, or a firewall rejects with “host unreachable…

523Cloudflare

Cloudflare Error 523: Origin is unreachable

Cloudflare can’t find a network route to your origin server — the DNS record points to a wrong/unroutable IP or the origin networ…

1016Cloudflare

Cloudflare Error 1016: Origin DNS error

Cloudflare can’t resolve the origin hostname your DNS record points to (usually a CNAME target).

1033Cloudflare

Cloudflare Error 1033: Argo Tunnel error (Cloudflare Tunnel not connected)

The hostname routes to a Cloudflare Tunnel, but no healthy cloudflared connector is running for it.

ERR_NAME_NOT_RESOLVEDJavaScript

net::ERR_NAME_NOT_RESOLVED (This site can't be reached — server IP address could not be found)

DNS couldn’t resolve the hostname in the browser.

DNS in podKubernetes

DNS not working inside a Kubernetes pod (could not resolve host / nslookup: can't resolve)

Pods can’t resolve service names or external hosts — CoreDNS is down, blocked by NetworkPolicy, or the upstream resolver fails.

1004Cloudflare

Cloudflare Error 1004: Host Not Configured to Serve Web Traffic

The DNS record was just created or changed and Cloudflare hasn’t propagated it yet — or Spectrum/non-HTTP ports are involved.

1013Cloudflare

Cloudflare Error 1013: HTTP hostname and TLS SNI hostname mismatch

The TLS SNI (the hostname used for the certificate) differs from the HTTP Host header in the same request.

1014Cloudflare

Cloudflare Error 1014: CNAME Cross-User Banned

Your DNS CNAME points to a hostname in another Cloudflare account, which Cloudflare blocks by default for security.

1023Cloudflare

Cloudflare Error 1023: Could not find host

Cloudflare can’t find the host — typically a zone that’s inactive or a custom hostname/SSL for SaaS not set up.