Unable to visit fly.io domain (2)

earthiverse · May 21, 2026, 2:50am

Sorry, I didn’t respond to this post fast enough and it got locked:

I’m still having the same issues, though.
I can visit https://debug.fly.dev/

=== Headers ===
Host: debug.fly.dev
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Te: trailers
X-Forwarded-Ssl: on
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Sec-Fetch-Dest: document
Sec-Fetch-User: ?1
Dnt: 1
X-Forwarded-For: 153.195.215.232, 37.16.21.10
X-Forwarded-Proto: https
Accept-Encoding: gzip, deflate, br, zstd
Fly-Forwarded-Proto: https
Fly-Forwarded-Ssl: on
Fly-Forwarded-Port: 443
X-Forwarded-Port: 443
Via: 2 fly.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:150.0) Gecko/20100101 Firefox/150.0
X-Request-Start: t=1779330907447000
Sec-Gpc: 1
Priority: u=0, i
Fly-Client-Ip: 153.195.215.232
Fly-Region: sjc
Fly-Request-Id: 01KS465Z9PTQB9KZ2DCWFSEJN7-sjc

2026-05-21 02:35:07.452021893 +0000 UTC m=+5642648.874439208

My ISP is NTT / OCN

|------------------------------------------------------------------------------------------|
|                                      WinMTR statistics                                   |
|                       Host              -   %  | Sent | Recv | Best | Avrg | Wrst | Last |
|------------------------------------------------|------|------|------|------|------|------|
|                     console.gl-inet.com -    0 |   15 |   15 |    4 |   15 |   33 |    4 |
|                           118.23.89.246 -    0 |   15 |   15 |    6 |   19 |   37 |    7 |
|                           118.23.89.169 -    0 |   15 |   15 |    8 |   20 |   37 |    8 |
|                           153.149.137.5 -    0 |   15 |   15 |    7 |   22 |   47 |   47 |
|                            122.1.245.53 -    0 |   15 |   15 |    9 |   19 |   35 |    9 |
|                          210.254.188.37 -    0 |   15 |   15 |   18 |   25 |   50 |   21 |
|                           122.1.245.206 -    0 |   15 |   15 |    7 |   20 |   37 |    7 |
|     ae-8.a04.tokyjp05.jp.bb.gin.ntt.net -    0 |   15 |   15 |    8 |   21 |   39 |    8 |
|                   No response from host -  100 |    3 |    0 |    0 |    0 |    0 |    0 |
|     ae-5.r26.sttlwa01.us.bb.gin.ntt.net -    0 |   15 |   15 |  100 |  125 |  236 |  112 |
|    ae-18.a02.sttlwa01.us.bb.gin.ntt.net -    0 |   15 |   15 |   99 |  127 |  238 |  130 |
|                ae7.cr4-sea2.ip4.gtt.net -    0 |   15 |   15 |   99 |  127 |  238 |  114 |
|                ae3.cr4-sjc1.ip4.gtt.net -    0 |   15 |   15 |  117 |  140 |  237 |  130 |
|                             ip4.gtt.net -    0 |   15 |   15 |  120 |  150 |  237 |  138 |
|       ip-37-16-18-81.customer.flyio.net -    0 |   15 |   15 |  117 |  141 |  237 |  130 |
|________________________________________________|______|______|______|______|______|______|

mayailurus · May 21, 2026, 6:09pm

As a small side note… It’s best to use the Questions / Help category on threads that you’re hoping will be noticed by Fly.io employees. (Or re-noticed, in this case.) Those get inducted directly into Fly Support’s formal ticketing system:

https://community.fly.io/t/your-posts-are-now-getting-sent-directly-to-our-desks/27767

It’s a really weird route you posted yesterday: Tokyo → Seattle → San Francisco, …

Aside²: I just added that category to this thread.

PeterCxy · May 21, 2026, 6:17pm

Can you try connecting to https://fly.io (i.e. port 443) instead? The original thread shows that the error is a connection reset, which is really really weird given that debug.fly.dev works for you.

earthiverse · May 22, 2026, 8:03am

Thanks!

curl -vvv https://fly.io

16:59:53.259768 [0-x] * [READ] client_reset, clear readers
16:59:53.260185 [0-0] * [HTTPS-CONNECT] added
16:59:53.260253 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 0 socks
16:59:53.263668 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 0 socks
16:59:53.263743 [0-0] * Host fly.io:443 was resolved.
16:59:53.263794 [0-0] * IPv6: 2a09:8280:1::a:791
16:59:53.263835 [0-0] * IPv4: 37.16.18.81
16:59:53.263870 [0-0] * [HTTPS-CONNECT] connect, init
16:59:53.263914 [0-0] * [HTTPS-CONNECT] 1st attempt uses h2 from wanted versions
16:59:53.264004 [0-0] *   Trying [2a09:8280:1::a:791]:443...
16:59:53.264199 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0
16:59:53.264255 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 1 socks
16:59:53.266929 [0-0] * connect to 2a09:8280:1::a:791 port 443 from fd0a:555d:c598:0:1c33:62bb:44d8:1ff1 port 63658 failed: Connection refused
16:59:53.267086 [0-0] *   Trying 37.16.18.81:443...
16:59:53.267194 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0
16:59:53.267246 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 1 socks
16:59:53.269229 [0-0] * connect to 37.16.18.81 port 443 from 192.168.50.162 port 63659 failed: Connection refused
16:59:53.269346 [0-0] * Failed to connect to fly.io port 443 after 9 ms: Could not connect to server
16:59:53.269413 [0-0] * [HTTPS-CONNECT] connect, all attempts failed
16:59:53.269459 [0-0] * [HTTPS-CONNECT] connect -> 7, done=0
16:59:53.269501 [0-0] * [WRITE] [OUT] done
16:59:53.269532 [0-0] * closing connection #0
curl: (7) Failed to connect to fly.io port 443 after 9 ms: Could not connect to server

curl -vvv http://fly.io

16:59:56.335791 [0-x] * [READ] client_reset, clear readers
16:59:56.336040 [0-0] * [SETUP] added
16:59:56.338386 [0-0] *   Trying [2a09:8280:1::a:791]:80...
16:59:56.338616 [0-0] * Host fly.io:80 was resolved.
16:59:56.338661 [0-0] * IPv6: 2a09:8280:1::a:791
16:59:56.338700 [0-0] * IPv4: 37.16.18.81
16:59:56.340766 [0-0] * connect to 2a09:8280:1::a:791 port 80 from fd0a:555d:c598:0:1c33:62bb:44d8:1ff1 port 63663 failed: Connection refused
16:59:56.340909 [0-0] *   Trying 37.16.18.81:80...
16:59:56.343493 [0-0] * connect to 37.16.18.81 port 80 from 192.168.50.162 port 63664 failed: Connection refused
16:59:56.343697 [0-0] * Failed to connect to fly.io port 80 after 7 ms: Could not connect to server
16:59:56.343821 [0-0] * [WRITE] [OUT] done
16:59:56.343876 [0-0] * closing connection #0
curl: (7) Failed to connect to fly.io port 80 after 7 ms: Could not connect to server

curl -v https://debug.fly.dev

* Host debug.fly.dev:443 was resolved.
* IPv6: 2a09:8280:1::1:2, 2a09:8280:1:763f:8bdd:34d1:c624:78cd
* IPv4: 77.83.140.164, 37.16.16.7, 37.16.21.10
*   Trying [2a09:8280:1::1:2]:443...
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* SSL Trust Anchors:
*   Native: Apple SecTrust
*   OpenSSL default paths (fallback)
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / x25519 / id-ecPublicKey
* ALPN: server accepted h2
* Server certificate:
*   subject: CN=*.fly.dev
*   start date: Apr 22 23:23:47 2026 GMT
*   expire date: Jul 21 23:23:46 2026 GMT
*   issuer: C=US; O=Let's Encrypt; CN=E8
*   Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA384
*   Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using sha256WithRSAEncryption
*   Certificate level 2: Public key type RSA (4096/152 Bits/secBits), signed using sha256WithRSAEncryption
*   subjectAltName: "debug.fly.dev" matches cert's "*.fly.dev"
* OpenSSL verify result: 0
* SSL certificate verified via OpenSSL.
* Established connection to debug.fly.dev (2a09:8280:1::1:2 port 443) from fd0a:555d:c598:0:1c33:62bb:44d8:1ff1 port 64002 
* using HTTP/2
* [HTTP/2] [1] OPENED stream for https://debug.fly.dev/
* [HTTP/2] [1] [:method: GET]
* [HTTP/2] [1] [:scheme: https]
* [HTTP/2] [1] [:authority: debug.fly.dev]
* [HTTP/2] [1] [:path: /]
* [HTTP/2] [1] [user-agent: curl/8.20.0]
* [HTTP/2] [1] [accept: */*]
> GET / HTTP/2
> Host: debug.fly.dev
> User-Agent: curl/8.20.0
> Accept: */*
> 
* Request completely sent off
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
< HTTP/2 200 
< fly-region: sjc
< remote-addr: 172.16.0.2:51544
< date: Fri, 22 May 2026 08:04:39 GMT
< content-length: 518
< content-type: text/plain; charset=utf-8
< server: Fly/1bcde622f6 (2026-05-22)
< via: 2 fly.io
< fly-request-id: 01KS7BE397HFQ9N590NF2KPEP8-sjc
< 
=== Headers ===
Host: debug.fly.dev
X-Forwarded-For: 2400:4051:9cc0:7900:9683:c4ff:febc:f64d, 2a09:8280:1::1:2
X-Forwarded-Port: 443
Fly-Region: sjc
Fly-Client-Ip: 2400:4051:9cc0:7900:9683:c4ff:febc:f64d
Fly-Forwarded-Ssl: on
Fly-Forwarded-Port: 443
X-Forwarded-Ssl: on
Fly-Request-Id: 01KS7BE397HFQ9N590NF2KPEP8-sjc
User-Agent: curl/8.20.0
X-Request-Start: t=1779437079847457
Via: 2 fly.io
Accept: */*
Fly-Forwarded-Proto: https
X-Forwarded-Proto: https

2026-05-22 08:04:39.853490308 +0000 UTC m=+18103307.674328653
* Connection #0 to host debug.fly.dev:443 left intact

mtr -rwbzo "LSD NABVW" fly.io

Start: 2026-05-22T17:12:38+0900
HOST: MacBookPro.lan                                                    Loss%   Snt Drop   Last   Avg  Best StDev  Wrst
  1. AS???         console.gl-inet.com (192.168.50.1)                    0.0%    10    0    3.1   3.1   2.6   0.4   4.0
  2. AS4713        118.23.89.246                                         0.0%    10    0    4.8   5.2   4.0   1.0   6.7
  3. AS4713        118.23.89.169                                         0.0%    10    0    9.3   7.4   5.8   1.8  11.6
  4. AS4713        153.149.137.5                                         0.0%    10    0   16.2  16.4   5.6  20.2  65.7
  5. AS4713        122.1.245.53                                          0.0%    10    0    6.6   6.2   5.8   0.4   6.7
  6. AS4713        210.254.188.37                                        0.0%    10    0    5.8   6.7   5.4   2.3  13.1
  7. AS4713        122.1.245.206                                         0.0%    10    0    6.3   6.1   5.0   0.6   6.8
  8. AS2914        ae-8.a04.tokyjp05.jp.bb.gin.ntt.net (120.88.53.29)    0.0%    10    0    7.0   6.9   6.3   0.3   7.2
  9. AS2914        ae-6.r34.tokyjp05.jp.bb.gin.ntt.net (129.250.6.122)  80.0%    10    8    8.9   8.7   8.5   0.3   8.9
 10. AS2914        ae-5.r26.sttlwa01.us.bb.gin.ntt.net (129.250.4.142)   0.0%    10    0   98.4  99.5  98.4   1.1 101.7
 11. AS2914        ae-18.a02.sttlwa01.us.bb.gin.ntt.net (129.250.2.27)   0.0%    10    0   97.3  97.4  96.4   1.3 100.7
 12. AS3257        ae7.cr4-sea2.ip4.gtt.net (199.229.231.89)             0.0%    10    0  104.8 106.4 103.0   6.1 123.6
 13. AS3257        ae3.cr4-sjc1.ip4.gtt.net (89.149.130.14)              0.0%    10    0  117.8 117.5 116.6   0.7 118.9
 14. AS3257        ip4.gtt.net (63.141.202.210)                          0.0%    10    0  122.4 141.1 116.9  19.2 172.3
 15. AS40509       ip-37-16-18-81.customer.flyio.net (37.16.18.81)       0.0%    10    0  120.9 117.9 117.1   1.1 120.9

mtr -rwbzo "LSD NABVW" debug.fly.dev

Start: 2026-05-22T17:16:54+0900
HOST: MacBookPro.lan                                                    Loss%   Snt Drop   Last   Avg  Best StDev  Wrst
  1. AS???         console.gl-inet.com (192.168.50.1)                    0.0%    10    0    2.7   2.7   2.4   0.2   3.1
  2. AS4713        118.23.89.246                                         0.0%    10    0    4.5   5.0   4.5   0.5   5.9
  3. AS4713        118.23.89.173                                         0.0%    10    0    7.4   7.5   7.3   0.3   8.1
  4. AS4713        153.149.137.9                                         0.0%    10    0   48.1  13.6   5.6  13.0  48.1
  5. AS4713        122.1.245.49                                          0.0%    10    0    7.4   7.9   7.2   0.8  10.0
  6. AS4713        210.254.188.37                                        0.0%    10    0    6.9   6.7   6.3   0.3   7.4
  7. AS4713        122.1.245.206                                         0.0%    10    0    7.0   6.9   6.0   0.5   7.8
  8. AS2914        ae-9.a03.tokyjp05.jp.bb.gin.ntt.net (120.88.53.21)    0.0%    10    0    7.9   7.6   7.1   0.6   9.1
  9. AS2914        ae-2.r34.tokyjp05.jp.bb.gin.ntt.net (129.250.6.120)  50.0%    10    5   10.6  10.2   9.5   0.7  11.1
 10. AS2914        ae-5.r26.sttlwa01.us.bb.gin.ntt.net (129.250.4.142)   0.0%    10    0   99.5  99.6  99.0   0.5 100.8
 11. AS2914        ae-18.a02.sttlwa01.us.bb.gin.ntt.net (129.250.2.27)   0.0%    10    0  120.3 100.0  96.9   7.2 120.3
 12. AS3257        ae7.cr4-sea2.ip4.gtt.net (199.229.231.89)             0.0%    10    0  104.1 104.5 103.8   0.8 106.3
 13. AS3257        ae3.cr4-sjc1.ip4.gtt.net (89.149.130.14)              0.0%    10    0  183.7 125.1 117.0  20.6 183.7
 14. AS3257        ip4.gtt.net (63.141.202.210)                          0.0%    10    0  119.0 118.5 117.9   0.7 120.3
 15. AS40509       debug.fly.dev (37.16.21.10)                           0.0%    10    0  122.5 122.0 120.2   2.7 129.4

PeterCxy · May 22, 2026, 1:46pm

Hmmm, honestly this sounds to me more like your ISP is blocking the specific IP address used by fly.io. All of the Anycast IPs hosted on Fly are routed identically. In your case they’re routed to sjc, which is definitely suboptimal, but that alone does not explain why you get “Connection Refused”. But I don’t think any of our sjc nodes are rejecting connections to fly.io’s IP addresses at the moment (and even if we do, it’s not usually a Connection Refused, due to how our proxy is architected).

I’ll dig around a bit more but at this point it sounds like it’s your ISP that’s blocking our IP.

roadmr · May 22, 2026, 1:57pm

One thing to try: curl -v --resolve fly.io:443:213.188.199.153 https://fly.io, this uses an alternative ip address which may not be blocked by your ISP.

earthiverse · May 23, 2026, 5:00am

This worked, thanks!

roadmr · May 25, 2026, 1:18pm

thanks @earthiverse. Based on this, it definitely looks like your ISP is blocking the other IP address for fly.io. You’d have to ask them about this, it’s not something we can control on our side.

Cheers!