Hello friends and administrators, I'm having error 522 on a new server of mine, I'm using cloudflare, my server was working correctly and I'm finding that the fiber company here in my region is blocking the HTTP ports, I can access the aapanel through the ip+port, plus the cloudflare cannot access my server over ports 80 or 443. Could someone explain to me how I can change port 80 and 443 to another one, so that my domains work with another random port? Thank you so much

Have you whitelisted the Cloudflare IPs on your server? which webserver you are using? https://www.cloudflare.com/ips/

error 522

aaP_streamfilmes

Hi Johncarter, thanks for the reply.

I'm using aapanel+nginx, but I don't know where I go to enable these ips from cloudflare, where is it in aapanel?

Thank you so much

sophia

aaP_streamfilmes
Hey happy to help you out
go to the security tab or /firewall
then look for SYS firewall
then you should see the ports open on the server
Click edit on 443/80
look for Source and there should be a drop-down menu select Specify IP
then add the Cloudflare ips separating each with a comma (,)

Hope this helps
Cheers

jonhcarter

Edit your nginx.conf file and add the following to your http section:

Cloudflare https://www.cloudflare.com/ips

set_real_ip_from 173.245.48.0/20;
set_real_ip_from 103.21.244.0/22;
set_real_ip_from 103.22.200.0/22;
set_real_ip_from 103.31.4.0/22;
set_real_ip_from 141.101.64.0/18;
set_real_ip_from 108.162.192.0/18;
set_real_ip_from 190.93.240.0/20;
set_real_ip_from 188.114.96.0/20;
set_real_ip_from 197.234.240.0/22;
set_real_ip_from 198.41.128.0/17;
set_real_ip_from 162.158.0.0/15;
set_real_ip_from 104.16.0.0/13;
set_real_ip_from 104.24.0.0/14;
set_real_ip_from 172.64.0.0/13;
set_real_ip_from 131.0.72.0/22;
set_real_ip_from 2400:cb00::/32;
set_real_ip_from 2606:4700::/32;
set_real_ip_from 2803:f800::/32;
set_real_ip_from 2405:b500::/32;
set_real_ip_from 2405:8100::/32;
set_real_ip_from 2c0f:f248::/32;
set_real_ip_from 2a06:98c0::/29;
real_ip_header CF-Connecting-IP;

aaPanel_Kern

aaP_streamfilmes
Hi. Has the problem been solved?

aaP_streamfilmes

Hello friends, thank you all for your help.

I added the two options given above, but it didn't work =(

would anyone know how to configure a new port to work in place of port 80 and 443?

if it's blocking my fiber operator's ports this would be the only solution.

Thanks everyone for the answers

aaPanel_Kern

aaP_streamfilmes
Use a different port when building the site. Or add the domain name of another port in the site. Then the system firewall and the server provider's firewall (security group) open the relevant ports

aaP_streamfilmes

I did the test on this site "https://dnschecker.org/port-scanner.php" and all the "server ports" were "Timed-Out" and after this test I added the port 8881 to the list, and that was the only port that was with status "open" which leads me to think that it is really possible for the fiber operator to be blocking the ports.
I wait for your help so that I can change the HTTPs ports of my aapanel.

aaPanel_Kern

aaP_streamfilmes
After successfully applying for SSL using DNS, change all 443 ports to another port in the configuration file of the site. Such as 8443
Then the system firewall and the server provider's firewall open the relevant ports
Visit: https://domain:8443

aaP_streamfilmes

I'm noticing a very strange thing, the access port 8881 for the aapanel is ok, the SSH port is also ok, both open, I did a test and changed both ports and they opened normally, I didn't move my modem, could it be can aapanel be blocking these server ports?

aaPanel_Kern

aaP_streamfilmes
aapanel does not block these ports. The relevant ports will be blocked when the system firewall is not open. It is recommended to consult your network provider

aaP_streamfilmes

Thanks for the great help "aaPanel_Kern" I did everything you put above in the message, but it didn't work, all the ports that appear blocked when I go to the SSH port and add it and press "change" on the site "https://dnschecker. org/port-scanner" the port is "open", very strange, the other ports that are in SYS firewall do not want to open, can you tell me why?

aaPanel_Kern

aaP_streamfilmes
The system firewall needs to open the relevant ports. Otherwise you can't link

aaP_streamfilmes

perfect, I'll do some tests here, and if it works, I'll post it here