Error map

1002 Cloudflare Error 1002: DNS points to Prohibited IP / Restricted

Cloudflare · layer 3, Edge & web server

Open the full error page →

Centre: this error. First ring: errors it is linked with (12). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.

1002 — Cloudflare Error 1002: DNS points to Prohibited IP / Restricted (Cloudflare)1002cURL error 6 — cURL error 6: Could not resolve host: api.example.com (PHP)cURL error 6secretOrPrivateKey must have a value — Error: secretOrPrivateKey must have a value (jsonwebtoken sign) (Authentication)secretOrPrivateKey …sudo: unable to resolve host — sudo: unable to resolve host <hostname>: Name or service not known (Linux)sudo: unable to res…530 — Cloudflare HTTP 530 (with Error 1016 Origin DNS error / 1033 tunnel error) (Cloudflare)5301003 — Cloudflare Error 1003: Direct IP access not allowed (Cloudflare)10031014 — Cloudflare Error 1014: CNAME Cross-User Banned (Cloudflare)10141023 — Cloudflare Error 1023: Could not find host (Cloudflare)1023Pending validation — ACM certificate stuck in Pending validation (AWS)Pending validationDNS in pod — DNS not working inside a Kubernetes pod (could not resolve host / nslookup: can't resolve) (Kubernetes)DNS in pod1000 — Cloudflare Error 1000: DNS points to prohibited IP (Cloudflare)10001016 — Cloudflare Error 1016: Origin DNS error (Cloudflare)10161035 — Cloudflare Error 1035 / 1036: Invalid request rewrite (invalid URI path / query string) (Cloudflare)1035ENOTFOUND — Error: getaddrinfo ENOTFOUND host / Name or service not known (API)ENOTFOUNDCould not resolve host — fatal: unable to access 'https://github.com/…': Could not resolve host: github.com (Git)Could not resolve h…UnknownHostException — java.net.UnknownHostException: api.example.com (Java)UnknownHostException413 — HTTP 413 Content Too Large (Request Entity Too Large) (HTTP)413TokenExpiredError — JWT Expired / Invalid Token (Authentication)TokenExpiredErrorCreateContainerConfigError — Kubernetes: CreateContainerConfigError — secret / configmap not found (Kubernetes)CreateContainerConf…sudoers — user is not in the sudoers file. This incident will be reported. (Linux)sudoersapi_version_invalid — API Error: Invalid or unsupported API version (API)api_version_invalidfeature_not_enabled — API Error: Feature not enabled for this account (feature_not_enabled / not available on your plan) (API)feature_not_enabled523 — Cloudflare Error 523: Origin is unreachable (Cloudflare)5231001 — Cloudflare Error 1001: DNS resolution error (Cloudflare)10011033 — Cloudflare Error 1033: Argo Tunnel error (Cloudflare Tunnel not connected) (Cloudflare)10331004 — Cloudflare Error 1004: Host Not Configured to Serve Web Traffic (Cloudflare)10041013 — Cloudflare Error 1013: HTTP hostname and TLS SNI hostname mismatch (Cloudflare)10131034 — Cloudflare Error 1034: Edge IP Restricted (Cloudflare)103481053 — Cloudflare DNS: An A, AAAA, or CNAME record with that host already exists (code 81053) (Cloudflare)81053DNS_PROBE_FINISHED_NXDOMAIN — Chrome: This site can’t be reached — server IP address could not be found. DNS_PROBE_FINISHED_NXDOMAIN (Browser)DNS_PROBE_FINISHED_…DNS_PROBE_FINISHED_NO_INTERNET — Chrome: No internet — DNS_PROBE_FINISHED_NO_INTERNET (DNS probe finished, no internet) (Browser)DNS_PROBE_FINISHED_…1018 — Cloudflare Error 1018: Could not find host (Cloudflare)1018Server not found — Firefox: Hmm. We’re having trouble finding that site. / Server not found (DNS_PROBE or NS_ERROR_UNKNOWN_HOST) (Browser)Server not foundCERTIFICATE_VERIFY_FAILED — SSL: CERTIFICATE_VERIFY_FAILED / unable to get local issuer certificate (API)CERTIFICATE_VERIFY_…Git SSL certificate problem — fatal: unable to access 'https://…': SSL certificate problem: unable to get local issuer certificate (Git)Git SSL certificate…PKIX path building failed — javax.net.ssl.SSLHandshakeException: PKIX path building failed: unable to find valid certification path to requested target (Java)PKIX path building …ERR_NAME_NOT_RESOLVED — net::ERR_NAME_NOT_RESOLVED (This site can't be reached — server IP address could not be found) (JavaScript)ERR_NAME_NOT_RESOLV…lookup registry-1.docker.io: no such host — dial tcp: lookup registry-1.docker.io: no such host / Temporary failure in name resolution during docker build (Docker)lookup registry-1.d…default backend - 404 — Ingress returns "404 Not Found" / "default backend - 404" (ingress-nginx) (Kubernetes)default backend - 4…DB connection — WordPress: Error Establishing a Database Connection (WordPress)DB connectiondivergent branches — hint: You have divergent branches and need to specify how to reconcile them. (Git)divergent branchesauthor identity unknown — Author identity unknown *** Please tell me who you are. (Git)author identity unk…Cloudflare 502 — Cloudflare-branded 502 Bad Gateway / 504 Gateway Timeout ("cloudflare" footer) (Cloudflare)Cloudflare 502cloudflared Unable to reach the origin service — cloudflared: Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared (502) (Cloudflare)cloudflared Unable …1200 — Cloudflare Error 1200: Cache connection limit (Cloudflare)12001037 — Cloudflare Error 1037: Invalid rewrite rule (failed to evaluate expression) (Cloudflare)10371040 — Cloudflare Error 1040 / 1041: Invalid request header modification (Cloudflare)1040

Directly related (12)

cURL error 6PHP

cURL error 6: Could not resolve host: api.example.com

PHP cURL couldn’t resolve the hostname via DNS.

secretOrPrivateKey must have a valueAuthentication

Error: secretOrPrivateKey must have a value (jsonwebtoken sign)

jwt.sign() got an empty secret — the environment variable holding the JWT secret isn’t loaded.

sudo: unable to resolve hostLinux

sudo: unable to resolve host <hostname>: Name or service not known

The machine’s hostname isn’t in /etc/hosts (or DNS), so sudo prints this warning — usually after changing the hostname.

530Cloudflare

Cloudflare HTTP 530 (with Error 1016 Origin DNS error / 1033 tunnel error)

Cloudflare returns 530 together with a 1xxx error; the 1xxx code (usually 1016 or 1033) tells you the real cause.

1003Cloudflare

Cloudflare Error 1003: Direct IP access not allowed

The request went to a Cloudflare IP address directly (or with a Host header for a domain not on Cloudflare).

1014Cloudflare

Cloudflare Error 1014: CNAME Cross-User Banned

Your DNS CNAME points to a hostname in another Cloudflare account, which Cloudflare blocks by default for security.

1023Cloudflare

Cloudflare Error 1023: Could not find host

Cloudflare can’t find the host — typically a zone that’s inactive or a custom hostname/SSL for SaaS not set up.

Pending validationAWS

ACM certificate stuck in Pending validation

ACM is waiting to see the DNS (or email) validation record — it wasn’t created, was created in the wrong DNS zone, or has a typo.

DNS in podKubernetes

DNS not working inside a Kubernetes pod (could not resolve host / nslookup: can't resolve)

Pods can’t resolve service names or external hosts — CoreDNS is down, blocked by NetworkPolicy, or the upstream resolver fails.

1000Cloudflare

Cloudflare Error 1000: DNS points to prohibited IP

A proxied DNS record points at a Cloudflare IP address, creating a loop.

1016Cloudflare

Cloudflare Error 1016: Origin DNS error

Cloudflare can’t resolve the origin hostname your DNS record points to (usually a CNAME target).

1035Cloudflare

Cloudflare Error 1035 / 1036: Invalid request rewrite (invalid URI path / query string)

A Transform Rule (URL rewrite) produced an invalid path or query string.

Two steps away (34)

ENOTFOUNDAPI

Error: getaddrinfo ENOTFOUND host / Name or service not known

DNS lookup for the hostname failed — the name is wrong, doesn’t exist, or this machine can’t resolve it.

Could not resolve hostGit

fatal: unable to access 'https://github.com/…': Could not resolve host: github.com

DNS lookup for the Git host failed from this machine.

UnknownHostExceptionJava

java.net.UnknownHostException: api.example.com

DNS resolution failed for the hostname.

413HTTP

HTTP 413 Content Too Large (Request Entity Too Large)

The request body is bigger than the server is willing to accept — usually a file upload over the configured limit.

TokenExpiredErrorAuthentication

JWT Expired / Invalid Token

The JSON Web Token sent with the request is expired, malformed or signed with a different key, so the API rejects it (usually wit…

CreateContainerConfigErrorKubernetes

Kubernetes: CreateContainerConfigError — secret / configmap not found

Kubernetes can’t build the container’s configuration — usually a referenced Secret, ConfigMap or key doesn’t exist in that namesp…

sudoersLinux

user is not in the sudoers file. This incident will be reported.

Your account isn’t allowed to use sudo.

api_version_invalidAPI

API Error: Invalid or unsupported API version

The API version you requested — in the URL, a header or the SDK config — doesn’t exist or has been retired.

feature_not_enabledAPI

API Error: Feature not enabled for this account (feature_not_enabled / not available on your plan)

The endpoint or option exists, but your account, plan, region or project hasn’t been granted access to it.

523Cloudflare

Cloudflare Error 523: Origin is unreachable

Cloudflare can’t find a network route to your origin server — the DNS record points to a wrong/unroutable IP or the origin networ…

1001Cloudflare

Cloudflare Error 1001: DNS resolution error

Cloudflare received the request but the hostname isn’t set up on Cloudflare (or the domain was just added and not active yet).

1033Cloudflare

Cloudflare Error 1033: Argo Tunnel error (Cloudflare Tunnel not connected)

The hostname routes to a Cloudflare Tunnel, but no healthy cloudflared connector is running for it.

1004Cloudflare

Cloudflare Error 1004: Host Not Configured to Serve Web Traffic

The DNS record was just created or changed and Cloudflare hasn’t propagated it yet — or Spectrum/non-HTTP ports are involved.

1013Cloudflare

Cloudflare Error 1013: HTTP hostname and TLS SNI hostname mismatch

The TLS SNI (the hostname used for the certificate) differs from the HTTP Host header in the same request.

1034Cloudflare

Cloudflare Error 1034: Edge IP Restricted

The DNS record points to a Cloudflare IP not assigned to your zone — typically an A record pointing to an old Cloudflare IP or an…

81053Cloudflare

Cloudflare DNS: An A, AAAA, or CNAME record with that host already exists (code 81053)

Cloudflare won’t create the record because another record of a conflicting type already uses that name.

DNS_PROBE_FINISHED_NXDOMAINBrowser

Chrome: This site can’t be reached — server IP address could not be found. DNS_PROBE_FINISHED_NXDOMAIN

The DNS server answered that the domain name does not exist (NXDOMAIN) — a typo, an expired or unregistered domain, a missing DNS…

DNS_PROBE_FINISHED_NO_INTERNETBrowser

Chrome: No internet — DNS_PROBE_FINISHED_NO_INTERNET (DNS probe finished, no internet)

Chrome’s built-in DNS probe could not reach any DNS server, so the device effectively has no working internet or DNS.

1018Cloudflare

Cloudflare Error 1018: Could not find host

The hostname isn’t found on Cloudflare — the zone was recently added/removed, or the record doesn’t exist yet.

Server not foundBrowser

Firefox: Hmm. We’re having trouble finding that site. / Server not found (DNS_PROBE or NS_ERROR_UNKNOWN_HOST)

Firefox could not resolve the website’s hostname to an IP address — a typo, a DNS problem or no internet.

CERTIFICATE_VERIFY_FAILEDAPI

SSL: CERTIFICATE_VERIFY_FAILED / unable to get local issuer certificate

The client couldn’t verify the server’s TLS certificate chain, so it refused the HTTPS connection.

Git SSL certificate problemGit

fatal: unable to access 'https://…': SSL certificate problem: unable to get local issuer certificate

Git doesn’t trust the HTTPS server’s certificate — corporate proxy, self-hosted Git with an internal CA, or outdated CA bundle.

PKIX path building failedJava

javax.net.ssl.SSLHandshakeException: PKIX path building failed: unable to find valid certification path to requested target

Java doesn’t trust the server’s certificate chain (self-signed, corporate proxy CA, or missing intermediate).

ERR_NAME_NOT_RESOLVEDJavaScript

net::ERR_NAME_NOT_RESOLVED (This site can't be reached — server IP address could not be found)

DNS couldn’t resolve the hostname in the browser.

lookup registry-1.docker.io: no such hostDocker

dial tcp: lookup registry-1.docker.io: no such host / Temporary failure in name resolution during docker build

DNS isn’t working for the Docker daemon or inside build containers, so pulls and package downloads fail.

default backend - 404Kubernetes

Ingress returns "404 Not Found" / "default backend - 404" (ingress-nginx)

The ingress controller received the request but no Ingress rule matched the host/path, so it answered with its default backend.

DB connectionWordPress

WordPress: Error Establishing a Database Connection

WordPress can’t connect to its MySQL/MariaDB database with the credentials in wp-config.php, or the database server is down.

divergent branchesGit

hint: You have divergent branches and need to specify how to reconcile them.

Git 2.27+ asks you to choose merge, rebase or fast-forward-only when local and remote both have new commits.

author identity unknownGit

Author identity unknown *** Please tell me who you are.

Git doesn’t know your name and email for commits.

Cloudflare 502Cloudflare

Cloudflare-branded 502 Bad Gateway / 504 Gateway Timeout ("cloudflare" footer)

A plain-looking 502/504 page with “cloudflare” at the bottom comes from Cloudflare’s network itself (or an origin response it cou…

cloudflared Unable to reach the origin serviceCloudflare

cloudflared: Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared (502)

The tunnel is connected, but cloudflared can’t reach your local service at the address in the ingress rule.

1200Cloudflare

Cloudflare Error 1200: Cache connection limit

Too many requests are queued at Cloudflare for the origin — the origin is slow and connections pile up.

1037Cloudflare

Cloudflare Error 1037: Invalid rewrite rule (failed to evaluate expression)

A rewrite rule’s dynamic expression failed at runtime — for example a function received a value of the wrong type or a missing fi…

1040Cloudflare

Cloudflare Error 1040 / 1041: Invalid request header modification

A Transform Rule tried to set or remove a request header that Cloudflare doesn’t allow to be modified, or produced an invalid val…