diff --git a/src/content/docs/fundamentals/reference/connection-limits.mdx b/src/content/docs/fundamentals/reference/connection-limits.mdx index a20551bd85b..819452f62e7 100644 --- a/src/content/docs/fundamentals/reference/connection-limits.mdx +++ b/src/content/docs/fundamentals/reference/connection-limits.mdx @@ -19,6 +19,14 @@ When HTTP/HTTPS traffic is [proxied through Cloudflare](/fundamentals/concepts/h ## Between Cloudflare and origin server +### What connection means here + +A **TCP connection** is established when its TCP handshake completes. For a new **TCP-based HTTPS connection**, setup also requires SSL/TLS negotiation. TCP can therefore be established while HTTPS setup remains unfinished. + +Requests can reuse established connections, and a proxied request may traverse multiple connections. A connection timeout does not, by itself, identify which operation timed out or what caused it. Reused connections and QUIC do not have the same per-request TCP/TLS setup sequence as a new TCP-based HTTPS connection. + +The TCP establishment and request-acknowledgment rows describe specific TCP timeout conditions. They are not an exhaustive list of every operation that can produce [522](/support/troubleshooting/http-status-codes/cloudflare-5xx-errors/error-522/). Neither value is a universal TCP-plus-TLS setup budget. A timeout while TLS remains pending can be reported as `522` rather than [525](/support/troubleshooting/http-status-codes/cloudflare-5xx-errors/error-525/). + :::note If you are using [Cloudflare tunnels](/cloudflare-one/networks/connectors/cloudflare-tunnel/), refer to [Origin configuration](/cloudflare-one/networks/connectors/cloudflare-tunnel/configure-tunnels/origin-parameters/) to view or modify your connection settings. @@ -26,8 +34,8 @@ If you are using [Cloudflare tunnels](/cloudflare-one/networks/connectors/cloudf | Type | Limit (seconds) | HTTP status code at limit | [Configurable](/fundamentals/reference/connection-limits/#configurable-limits) | | ----------------------------------------------------------------------------------------- | --------------- | -------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------ | -| Complete TCP Connection | 19 | [522](/support/troubleshooting/http-status-codes/cloudflare-5xx-errors/error-522/) | No | -| TCP ACK Timeout | 90 | [522](/support/troubleshooting/http-status-codes/cloudflare-5xx-errors/error-522/) | No | +| TCP connection establishment | 19 | [522](/support/troubleshooting/http-status-codes/cloudflare-5xx-errors/error-522/) | No | +| TCP request acknowledgment timeout | 90 | [522](/support/troubleshooting/http-status-codes/cloudflare-5xx-errors/error-522/) | No | | TCP Keep-Alive Interval | 30 | [520](/support/troubleshooting/http-status-codes/cloudflare-5xx-errors/error-520/) | No | | Proxy Idle Timeout | 900 | [520](/support/troubleshooting/http-status-codes/cloudflare-5xx-errors/error-520/) | No | | Proxy Read Timeout | 125 | [524](/support/troubleshooting/http-status-codes/cloudflare-5xx-errors/error-524/) | [Yes, for Enterprise zones](/api/resources/zones/subresources/settings/methods/edit/) |