Cloudflare Error Codes: What 520, 522, 524 and 1020 Mean

A Cloudflare error page in the 520 to 526 range means Cloudflare is working but could not get a usable answer from the website’s own server (the “origin”). Error 1020 means a security rule set by the site blocked the request. In both cases visitors can do little except reload later, try another network or report the problem to the site.

What do Cloudflare errors 520 to 526 mean?

Cloudflare sits between visitors and many websites. When the connection to the website’s server fails, Cloudflare shows its own error page. The titles below come from Cloudflare’s documentation on Cloudflare 5xx errors.

Code	Cloudflare’s title	Plain meaning
520	Web server returns an unknown error	The origin sent an empty, unknown or unexpected response
521	Web server is down	The origin appears to be offline
522	Connection timed out	Cloudflare’s connection to the origin timed out
523	Origin is unreachable	Cloudflare could not reach the origin
524	A timeout occurred	The origin connected but did not respond in time
525	SSL handshake failed	The secure connection between Cloudflare and the origin failed
526	Invalid SSL certificate	The origin’s security certificate is invalid

All seven point to the same side. The problem is between Cloudflare and the website’s server, not between you and Cloudflare. Cloudflare’s pages are written for site owners and hosting providers, and they tell visitors to report the problem to the site owner.

Does a Cloudflare error mean Cloudflare is down?

Usually not. If Cloudflare itself fails, many unrelated sites show errors at the same time. If you see the error on one site only while other Cloudflare-protected sites load, the fault is almost certainly that site’s server. Compare with our live Cloudflare status and Cloudflare’s own status page. For the larger case, read what a Cloudflare outage means.

What can I do as a visitor?

1. Reload once or twice. A 522 or 524 can come from an overloaded server that recovers.
2. Wait ten minutes and try again. A 521 means the origin appears offline, so the site’s team needs to bring it back.
3. Check whether the problem is limited to one site. Follow is it down or just me.
4. Contact the site. Cloudflare recommends that the owner receive the error code, the time and time zone, and the address you were visiting. Send those details through the site’s social account or support page.

Clearing your cache, restarting your router or changing your DNS will not fix a 5xx error from the origin. For generic 5xx behavior, see HTTP error codes explained.

What does Cloudflare error 1020 mean?

Error 1020 (“Access denied”) means a Cloudflare security rule configured by the website owner blocked your request. It returns an HTTP 403 status. According to Cloudflare’s documentation on error 1020, visitors cannot fix it. The page suggests sending the site owner a screenshot of the error so they can find the rule that blocked the request.

Switching to a different network or turning off a VPN for a moment can show whether your address triggered the rule. Do not use unofficial tools to get around a block.

What if the page says “Verifying you are human” or “Just a moment”?

That is a challenge page, not an error. Cloudflare uses it to check whether a visitor is a real browser before loading a site. It usually clears itself in a few seconds. Cloudflare’s guidance for visitors who get stuck on such a page is:

1. Update to the latest stable version of a modern browser such as Chrome, Safari or Firefox.
2. Pause browser extensions such as ad blockers and privacy tools for that site, then reload, since they can block scripts the check needs.
3. Switch to a different, trusted network if your connection comes from a shared VPN or a corporate proxy with a poor reputation.

The checkbox and the “Checking your browser” wording vary by site. If the challenge keeps appearing, the site owner may have set rules that flag your traffic, so contact them. Turn extensions back on afterward and never disable your device’s security software to pass a check.

How do 52x errors differ from 5xx errors on other sites?

Standard codes such as 500 and 503 come straight from a site’s server. The 520 to 526 codes are Cloudflare’s own and describe what happened on the leg between Cloudflare and the origin. Both tell you the website has a fault. The 52x codes simply tell the site owner where to look. Our Cloudflare status page shows whether the network itself reports trouble.

Bottom line

A 520 to 526 error is a server-side problem the owner must fix, and 1020 is a block rule you cannot change. As a visitor, reload later, test whether other sites work and report the code, time and address to the site.

FAQ

Is error 522 my fault?

No. Cloudflare’s own description says its connection to the origin timed out, so the problem sits between Cloudflare and the site’s server.

What is the difference between 521 and 523?

521 means the web server appears to be down. 523 means Cloudflare could not reach the origin at all.

Why do I get error 1020 on only one site?

The owner of that site set a rule that matched your request. Other sites have different rules. Send the owner a screenshot of the error.

Can a VPN cause a Cloudflare challenge?

It can. Cloudflare notes that an address with a poor reputation, often a shared VPN or corporate proxy, may trigger challenges. Try a different trusted network.