Error Guides

Each page explains one concrete backend or network error, the common causes behind it, the evidence that separates lookalike failures, and the first commands worth running.

How to use this library

Start with the exact phrase from the log, then confirm the layer that produced it: DNS, TCP, TLS, proxy, application runtime, or host resource limit. The guides are organized to prevent a common incident mistake: changing timeout, kernel, or proxy settings before proving which component failed.

If a symptom crosses layers, use the related guide links and the topic clusters below to move from the visible error to adjacent causes.

Find an error guide

Start with a concrete error message. Keep the query short and exact.

Diagnosis matrix

Use the first visible signal to choose the right guide cluster.

Routing, firewall, listener, load balancer target

Connect never completes

TCP reset, keepalive reuse, proxy close, app restart

Connection starts then closes abruptly

Upstream connect, header, body, timeout, protocol mismatch

Nginx reaches upstream but returns gateway error

Resolver, DNS view, CoreDNS, DNSSEC, private zone

Name lookup fails before connection

Browse by failure area

Start from the layer that owns the symptom, then move to adjacent causes.

Nginx / reverse-proxy

Nginx and reverse proxy

Gateway errors, upstream timeouts, connection closes, and proxy routing failures.

TCP / sockets

TCP and sockets

Resets, refused connections, broken pipes, retransmissions, and packet loss.

TLS / certificates

TLS and certificates

Handshake failures, unknown authorities, verification errors, and trust-store issues.

Linux / DNS

Linux operations

Host-level limits, DNS failures, ports, routes, and runtime diagnostics.

Jun 17, 2026 Linux / TCP

How to fix "cannot assign requested address"

A practical cannot assign requested address guide that separates wrong bind IP, missing local address, container networking, source address selection, ephemeral port exhaustion, and TIME_WAIT pressure.

Read guide
Jun 17, 2026 DNS / Linux

How to debug DNS SERVFAIL

A practical DNS SERVFAIL guide that separates resolver reachability, authoritative server failure, DNSSEC validation, broken delegation, private zone issues, and transient upstream resolver errors.

Read guide
Jun 17, 2026 Nginx / DNS

How to fix Nginx "host not found in upstream"

A practical Nginx host not found in upstream guide that separates startup DNS resolution, resolver directive behavior, Docker and Kubernetes DNS, variable proxy_pass, and upstream name changes.

Read guide
Jun 17, 2026 TLS / OpenSSL

How to fix "SSL wrong version number"

A practical TLS wrong version number guide that separates HTTP-to-HTTPS mismatches, TLS termination mistakes, proxy upstream schemes, STARTTLS confusion, and port mixups.

Read guide
Jun 17, 2026 Linux / TCP

How to debug SYN backlog overflow on Linux

A practical SYN backlog overflow guide that separates connection bursts, listener accept pressure, SYN flood symptoms, load balancer churn, kernel counters, and unsafe backlog tuning.

Read guide
Jun 17, 2026 TLS / certificates

How to debug TLS certificate expired errors

A practical TLS certificate expired guide that separates server certificate expiry, intermediate chain expiry, wrong SNI, stale load balancer certificates, client clock drift, and cached trust issues.

Read guide
Jun 17, 2026 TCP / Linux

How to debug too many CLOSE_WAIT connections

A practical CLOSE_WAIT troubleshooting guide that separates peer close behavior, application cleanup bugs, leaked response bodies, slow workers, connection pools, and file descriptor pressure.

Read guide
May 14, 2026 sockets / backend

Why "socket hang up" happens

A practical socket hang up guide for backend clients that separates peer resets, proxy timeouts, keepalive reuse, protocol mismatch, and application aborts.

Read guide
May 14, 2026 TLS / certificates

How to fix "certificate verify failed"

A practical certificate verify failed guide that separates hostname mismatch, expired certificates, incomplete chains, missing trust stores, containers, and runtime-specific CA behavior.

Read guide
May 14, 2026 TLS / timeout

What causes TLS handshake timeout

A practical TLS handshake timeout guide that separates TCP connect delay, packet loss, SNI, certificate exchange, server CPU pressure, mTLS, and proxy TLS termination issues.

Read guide
May 10, 2026 Nginx / timeout

Why "nginx upstream timed out" happens

A practical guide to Nginx upstream timed out errors that separates connect, send, and read timeouts from slow apps, dependency latency, and overloaded upstream workers.

Read guide
May 9, 2026 TLS / certificates

What causes TLS handshake failure

A practical TLS handshake failure guide that separates certificate chain problems, SNI mismatch, protocol and cipher mismatch, mTLS failures, and proxy TLS termination mistakes.

Read guide
May 7, 2026 Linux / limits

How to debug "too many open files"

A practical Linux file descriptor guide that separates low limits, descriptor leaks, burst traffic, socket accumulation, slow dependencies, and system-wide exhaustion.

Read guide
May 6, 2026 TCP / networking

What causes TCP retransmissions

A practical TCP retransmission guide that separates packet loss, congestion, receiver pressure, reordering, bad links, and misleading one-sided packet captures.

Read guide
May 4, 2026 timeout / TCP

Why "read: connection timed out" happens

A practical read timeout guide that separates established connections, first-byte delay, stalled response bodies, packet loss, proxy idle timeouts, and upstream dependency latency.

Read guide
May 3, 2026 networking / packet-loss

How to debug intermittent packet loss

A practical guide to intermittent packet loss that explains how to prove timing, direction, path, host counters, queue drops, and application impact.

Read guide
May 1, 2026 Linux / sockets

How to fix "address already in use"

A practical Linux bind conflict guide that separates active listeners, stale processes, restart races, TIME_WAIT confusion, SO_REUSEADDR, containers, and systemd socket activation.

Read guide
Apr 30, 2026 Linux / routing

What does "no route to host" mean?

A practical no route to host guide that separates missing routes, gateway failures, firewall rejects, container networks, Kubernetes policies, and unreachable subnets.

Read guide