Skip to content

Add Spectrum troubleshooting docs for top support case drivers#30683

Open
stechedo wants to merge 3 commits intocloudflare:productionfrom
stechedo:spectrum-troubleshooting-docs
Open

Add Spectrum troubleshooting docs for top support case drivers#30683
stechedo wants to merge 3 commits intocloudflare:productionfrom
stechedo:spectrum-troubleshooting-docs

Conversation

@stechedo
Copy link
Copy Markdown
Contributor

@stechedo stechedo commented May 7, 2026

Summary

Adds a new Spectrum Troubleshooting page and improves existing Spectrum documentation to address the top 3 case-generating issues identified in the April 2026 Network Support-by-Request (SBR) case review (~190 cases analyzed).

Estimated case deflection: 9-13 cases/month across these 3 issues.

Changes

New page

  • /spectrum/reference/troubleshooting/ — New troubleshooting page with structured symptom/cause/solution sections covering:
    • Health checks failing when IP Access Rules are enabled
    • DNS record conflict when creating Spectrum apps (same hostname as proxied record)
    • Protocol mismatch (origin receives HTTP instead of HTTPS)
    • Error 525 (SSL handshake failed) in Spectrum context
    • Common Spectrum event log status code patterns (444, 445, 497-499, 521, 522)

Modified pages (5)

  • /spectrum/reference/configuration-options/ — Added warnings about IP Access Rules blocking health checks, Custom Rules not working with Spectrum, protocol upgrade not being supported, and double-proxy chains causing 525 errors. Expanded intro paragraph to clarify Spectrum's L4 pass-through behavior.
  • /spectrum/reference/limitations/ — Added new "IP access control" section and "Using the same hostname for HTTP proxy and Spectrum" section documenting the platform limitation and recommending split-hostname architecture (with Citrix Gateway use case).
  • /spectrum/reference/logs/ — Added note clarifying that Spectrum status codes are distinct from HTTP status codes, with cross-link to troubleshooting page.
  • /load-balancing/additional-options/spectrum/ — Added caution callout in the Monitors setup step warning about IP Access Rules blocking health checks.
  • /dns/manage-dns-records/troubleshooting/records-with-same-name/ — Added note explaining that DNS record conflicts also apply to Spectrum applications, with cross-link to Spectrum limitations.

Motivation

These documentation gaps were identified by reviewing all April 2026 Network SBR cases. The top case-generating patterns were:

  1. IP Access Rules + Healthchecks (~3-5 cases/month): Customers enable IP Access Rules, health checks fail silently. No docs explain the interaction.
  2. Same Hostname WAF + Spectrum (~3-4 cases/month): Customers hit "DNS record already exists" error with no explanation that it's a hard platform limitation. Common in Citrix/VDI deployments.
  3. Protocol Mismatch / TLS errors (~3-4 cases/month): Customers expect Spectrum to upgrade HTTP→HTTPS or chain through another Cloudflare proxy. Neither is supported but neither was documented.

Content area

Spectrum, Load Balancing, DNS

stechedo and others added 2 commits August 5, 2025 11:55
Updating process for reporting an incorrect IP address
…se drivers

Based on analysis of April 2026 Network SBR cases, add documentation
to address the top 3 case-generating Spectrum issues:

1. IP Access Rules + Health Checks interaction: Customers enable IP
   Access Rules on Spectrum apps, then Cloudflare health checks fail
   because probe IPs are blocked. Added warnings to configuration-options
   and load-balancing/spectrum pages.

2. Same hostname for WAF + Spectrum: Customers attempt to use the same
   hostname for HTTP (WAF) and TCP (Spectrum) on different ports. This
   is a platform limitation. Added new section to limitations page and
   cross-reference on DNS troubleshooting page.

3. Edge TLS / Protocol mismatch: Customers configure HTTP edge ports
   expecting HTTPS to origin. Spectrum does not upgrade protocols.
   Added warnings to Edge TLS Termination section.

Also:
- Created new /spectrum/reference/troubleshooting/ page with structured
  symptom/cause/solution sections for all three issues plus error 525
  and common status code patterns
- Added note to /spectrum/reference/logs/ clarifying that Spectrum
  status codes are distinct from HTTP status codes
@stechedo stechedo requested review from a team, RebeccaTamachiro and dcpena as code owners May 7, 2026 16:58
@github-actions github-actions Bot added product:load-balancing Related to Load Balancing product product:spectrum Related to Spectrum product product:dns Issues or PRs related to DNS product:network size/m labels May 7, 2026
Replace stale email address (ip-corrections@cloudflare.com) with the
data correction form link and add 48-hour SLA language, matching the
currently published version at developers.cloudflare.com.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

product:dns Issues or PRs related to DNS product:load-balancing Related to Load Balancing product product:network product:spectrum Related to Spectrum product size/m

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants