tobychui / zoraxy

A general purpose HTTP reverse proxy and forwarding tool. Now written in Go!
https://zoraxy.aroz.org
GNU Affero General Public License v3.0
3.1k stars 188 forks source link

[HELP] Sudden and intermittent err_ech_fallback_certificate_invalid #324

Closed mosaati closed 1 month ago

mosaati commented 1 month ago

What happened? Some services that work without issues just throws this error.

Describe what have you tried Checked logs and error is not logged.

Describe the networking setup you are using Here are some example, commonly asked questions from our maintainers:

Additional context I have configured a whitelist for specific internal network ranges and for Cloudflare IPV6 and IPV4.

Internal network DNS is configured to route traffic to internal Zoraxy installation so that Cloudflare is not required which makes the experience really much better.

Everything is working fine except of this intermittent error on Sonarr and Radarr. I have tried to reproduce the error but it is really hard to and can't tell why it happens. It resolves itself in a minute or two.

I have been having issues generating certificates due to text records verification errors. Using DNS verification is working fine so far. Have not reached renewal stage yet.

I have noticed that there is an option to upload a fall back certificate. I am just not sure if it is required or what public and private keys to upload.

Thank you for your work and efforts.

mosaati commented 1 month ago

I changed my routing strategy and added the fallback certificate and I would consider this closed.

Thank you.