When Cloudflare Error 522 or 524 becomes a problem, the fastest fix is not always the first fix you find online. A safer approach is to confirm whether Cloudflare can reach the origin server, protect anything that still works and troubleshoot in a sequence that preserves recovery options. If the outage affects a WordPress site more broadly, use our WordPress website not loading guide, or get website technical support if you need the fault investigated.
Related help: For a site that remains unavailable after checking Cloudflare, see our website downtime checklist and WordPress update recovery guide. If the problem involves your hosting account, explore website hosting support or request technical assistance.
Write down exactly what is failing, when it started and who is affected. Save the exact error message. Test from another device or connection where appropriate.
If a live business service is affected, consider Office 365 setup before making broad changes.
Look for plugin or theme updates, password changes, DNS edits, hosting migrations, PHP upgrades, security rules or mailbox configuration changes. Use the timeline to narrow the investigation rather than assuming.
Before editing files, databases or DNS, confirm you have a usable backup or another recovery path. For security incidents, preserve relevant logs before cleanup.
Where compromise is suspected, website edits should consider credentials, vulnerable software and the original entry point, not just suspicious files.
Start with domain resolution, SSL, hosting response and account status. Then move into WordPress, plugins, the database and individual devices. This avoids troubleshooting the application when the fault sits elsewhere.
Record important settings, make one controlled change and test again. Multiple simultaneous changes make it difficult to identify what fixed or worsened the issue.
For infrastructure changes such as malware removal, keep a short record of old and new values so rollback remains possible.
A homepage loading does not prove a website is healthy. Test forms, logins, checkout, inbound and outbound email, mobile access, SSL and other functions the business relies on.
Document the cause and recovery steps. Keep domain, hosting and email ownership clear, maintain backups and updates, and record DNS settings and important third-party services.
Also see WordPress Memory Limit and Small Business IT Documentation for related checks and preventative steps.
A 522 generally means Cloudflare could not establish a timely connection with the origin server. Check whether the origin is online, whether the configured origin IP is correct and whether firewall or security rules are blocking Cloudflare connections. Server overload and network routing problems can produce similar symptoms.
A 524 means a connection to the origin was established but the server did not return an HTTP response within Cloudflare’s expected time. Look for slow PHP processes, expensive database queries, long-running imports or other application work. Simply retrying may hide the symptom without addressing the slow origin process.
Where appropriate, test the origin independently of the proxy so you can distinguish a Cloudflare-layer issue from a slow or unavailable server. Review server and application logs around the failure time. Do not permanently weaken firewall protection just to make the error disappear; identify which legitimate traffic needs to be allowed.
If the error appears only at busy times, compare timestamps with CPU, memory, database and PHP worker utilisation on the origin. Intermittent 522 or 524 responses can indicate capacity or application-performance problems rather than a permanent configuration fault. Monitoring over time is more informative than repeatedly refreshing the affected page after traffic has fallen.
For Cloudflare 522 524, diagnose before repairing. Confirm the scope, protect recovery options, check recent changes, test systematically and verify the full service afterwards.