🐛context canceled

[JamCh01]

Describe the bug
A clear and concise description of what the bug is.

To Reproduce
Steps to reproduce the behavior:

1. Configure 'from zero trust web'
2. Run 'cloudflared service install xxx'
3. See error

If it's an issue with Cloudflare Tunnel:
4. Tunnel ID : 7780c9b2-6203-4019-80dd-5ebb036f9c01
5. cloudflared config:

Expected behavior
A clear and concise description of what you expected to happen.

Environment and versions

• OS: [e.g. MacOS] Linux Debian12
• Architecture: [e.g. AMD, ARM] AMD
• Version: [e.g. 2022.02.0] cloudflared version 2024.12.2 (built 2024-12-19-1724 UTC)

Logs and errors
If applicable, add logs or errors to help explain your problem.

Dec 27 23:08:00 myhost cloudflared[514341]: 2024-12-27T23:08:00Z INF Starting tunnel tunnelID=7780c9b2-6203-4019-80dd-5ebb036f9c01
Dec 27 23:08:00 myhost cloudflared[514341]: 2024-12-27T23:08:00Z INF Version 2024.12.2 (Checksum 5237675a5e806120729acc78c5be02f9db5f406717699587abfa72b49b39fe40)
Dec 27 23:08:00 myhost cloudflared[514341]: 2024-12-27T23:08:00Z INF GOOS: linux, GOVersion: go1.22.5, GoArch: amd64
Dec 27 23:08:00 myhost cloudflared[514341]: 2024-12-27T23:08:00Z INF Settings: map[no-autoupdate:true token:*****]
Dec 27 23:08:00 myhost cloudflared[514341]: 2024-12-27T23:08:00Z INF cloudflared will not automatically update if installed by a package manager.
Dec 27 23:08:00 myhost cloudflared[514341]: 2024-12-27T23:08:00Z INF Generated Connector ID: 47572931-db89-4e43-a61c-88a6d6b7d792
Dec 27 23:08:00 myhost cloudflared[514341]: 2024-12-27T23:08:00Z INF Initial protocol quic
Dec 27 23:08:00 myhost cloudflared[514341]: 2024-12-27T23:08:00Z INF ICMP proxy will use 45.*.*.34 as source for IPv4
Dec 27 23:08:00 myhost cloudflared[514341]: 2024-12-27T23:08:00Z INF ICMP proxy will use fe80::6e92:bfff:fe66:f04d in zone ens33f1 as source for IPv6
Dec 27 23:08:00 myhost cloudflared[514341]: 2024-12-27T23:08:00Z WRN The user running cloudflared process has a GID (group ID) that is not within ping_group_range. You might need to add that user to a group within that range, or instead update the range to encompass a g>Dec 27 23:08:00 myhost cloudflared[514341]: 2024-12-27T23:08:00Z WRN ICMP proxy feature is disabled error="cannot create ICMPv4 proxy: Group ID 0 is not between ping group 1 to 0 nor ICMPv6 proxy: socket: permission denied"
Dec 27 23:08:00 myhost cloudflared[514341]: 2024-12-27T23:08:00Z INF ICMP proxy will use 45.*.*.34 as source for IPv4
Dec 27 23:08:00 myhost cloudflared[514341]: 2024-12-27T23:08:00Z INF ICMP proxy will use fe80::6e92:bfff:fe66:f04d in zone ens33f1 as source for IPv6
Dec 27 23:08:00 myhost cloudflared[514341]: 2024-12-27T23:08:00Z INF Starting metrics server on 127.0.0.1:20241/metrics
Dec 27 23:08:00 myhost cloudflared[514341]: 2024-12-27T23:08:00Z ERR Failed to serve tunnel connection error="context canceled" connIndex=0 event=0 ip=198.41.192.77
Dec 27 23:08:00 myhost cloudflared[514341]: 2024-12-27T23:08:00Z INF Retrying connection in up to 2s connIndex=0 event=0 ip=198.41.192.77
Dec 27 23:08:02 myhost cloudflared[514341]: 2024-12-27T23:08:02Z INF Tunnel server stopped
Dec 27 23:08:02 myhost cloudflared[514341]: 2024-12-27T23:08:02Z ERR Initiating shutdown error="context canceled"
Dec 27 23:08:02 myhost cloudflared[514341]: 2024-12-27T23:08:02Z INF Metrics server stopped
Dec 27 23:08:02 myhost cloudflared[514341]: context canceled

Additional context
Add any other context about the problem here.

[winefox]

I've the same problem...

[paulmorabito]

I have the same issue. Did you ever resolve this?

[sequencerr]

I don't remember why did it happen, but I googled this, and subscribed to this issue. And after rereading docs, and configuring it correctly to work with docker, problem was resolved. This answer might not be really helpful.

[paulmorabito]

I regenerated my token a few times and it worked. Random and weird.

[someshnesi]

We are facing similar issue with Cloudflare Tunnel authentication in Kubernetes despite multiple attempts to refresh the tunnel token and redeploy cloudflared pods.

ERR Failed to serve tunnel connection error="context canceled" with latest cloudflared images

error="Unauthorized: Invalid tunnel secret" with older version of cloudflared images

We have refreshed the token, updated Kubernetes secrets, redeployed the pod, and restarted the deployment multiple times. However, the issue persists.

2025-02-20T22:51:13Z INF Starting tunnel tunnelID=b4678717-a506-447b-a969-cf47f37ffddb
2025-02-20T22:51:13Z INF Version 2025.2.0 (Checksum d7e573b235ef4a1cf45d6b837f61094e4a3403c4ef92e1281a8fec3f7f257691)
2025-02-20T22:51:13Z INF GOOS: linux, GOVersion: go1.22.5-devel-cf, GoArch: amd64
2025-02-20T22:51:13Z INF Settings: map[config:/opt/zt/config/config.yaml cred-file:/opt/zt/creds/creds.json credentials-file:/opt/zt/creds/creds.json metrics:0.0.0.0:8081 no-autoupdate:true]
2025-02-20T22:51:13Z INF Generated Connector ID: 7f3ce060-d6d2-4d90-8c5b-7fab25b114d8
2025-02-20T22:51:13Z WRN No ingress rules were defined in provided config (if any) nor from the cli, cloudflared will return 503 for all incoming HTTP requests
2025-02-20T22:51:13Z INF Initial protocol quic
2025-02-20T22:51:13Z INF ICMP proxy will use 192.168.87.84 as source for IPv4
2025-02-20T22:51:13Z INF ICMP proxy will use fe80::582f:bfff:fe14:6eb3 in zone eth0 as source for IPv6
2025-02-20T22:51:13Z WRN The user running cloudflared process has a GID (group ID) that is not within ping_group_range. You might need to add that user to a group within that range, or instead update the range to encompass a group the user is already in by modifying /proc/sys/net/ipv4/ping_group_range. Otherwise cloudflared will not be able to ping this network error="Group ID 65532 is not between ping group 1 to 0"
2025-02-20T22:51:13Z WRN ICMP proxy feature is disabled error="cannot create ICMPv4 proxy: Group ID 65532 is not between ping group 1 to 0 nor ICMPv6 proxy: socket: permission denied"
2025-02-20T22:51:13Z INF ICMP proxy will use 192.168.87.84 as source for IPv4
2025-02-20T22:51:13Z INF ICMP proxy will use fe80::582f:bfff:fe14:6eb3 in zone eth0 as source for IPv6
2025-02-20T22:51:13Z INF Starting metrics server on :8081/metrics
2025-02-20T22:51:13Z INF Using [CurveID(4588) CurveID(25497) CurveP256] as curve preferences connIndex=0 event=0 ip=198.41.192.227
2025-02-20T22:51:13Z ERR Failed to serve tunnel connection error="context canceled" connIndex=0 event=0 ip=198.41.192.227
2025-02-20T22:51:13Z INF Retrying connection in up to 2s connIndex=0 event=0 ip=198.41.192.227
2025-02-20T22:51:14Z INF Tunnel server stopped
2025-02-20T22:51:14Z ERR Initiating shutdown error="context canceled"
2025-02-20T22:51:14Z INF Metrics server stopped
context canceled
Stream closed EOF for zt/tunnel-api-zt-7565f9ccf4-6sbxq (tunnel)

When I check the tunnel status by running the command, the tunnel becomes active, but I am getting errors with the same token in Kubernetes.

sudo cloudflared service install <refreshed token>
Password:
2025-02-20T20:50:29Z INF Installing cloudflared client as a system launch daemon. cloudflared client will run at boot
2025-02-20T20:50:29Z INF Outputs are logged to /Library/Logs/com.cloudflare.cloudflared.err.log and /Library/Logs/com.cloudflare.cloudflared.out.log
2025-02-20T20:50:29Z INF MacOS service for cloudflared installed successfully

Deployment configuration as pper https://blog.cloudflare.com/kubectl-with-zero-trust/

apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    tunnel: api-zt
  name: tunnel-api-zt
  namespace: zt
spec:
  replicas: 3
  selector:
    matchLabels:
      tunnel: api-zt
  strategy:
    rollingUpdate:
      maxSurge: 0
      maxUnavailable: 1
  template:
    metadata:
      labels:
        tunnel: api-zt
    spec:
      containers:
        - args:
            - tunnel
            - --config
            - /opt/zt/config/config.yaml
            - run
          env:
            - name: GOMAXPROCS
              value: "2"
            - name: TZ
              value: UTC
          image: cloudflare/cloudflared:2022.5.3
          livenessProbe:
            failureThreshold: 1
            httpGet:
              path: /ready
              port: 8081
            initialDelaySeconds: 10
            periodSeconds: 10
          name: tunnel
          ports:
            - containerPort: 8081
              name: http-metrics
          resources:
            limits:
              cpu: "1"
              memory: 100Mi
          volumeMounts:
            - mountPath: /opt/zt/config
              name: config  
              readOnly: true
            - mountPath: /opt/zt/creds
              name: creds  
              readOnly: true
      volumes:
        - name: creds 
          secret:
            secretName: tunnel-creds
        - name: config 
          configMap:
            name: tunnel-zt

[c00kiemonstr]

I am also having the same issue running a Docker connector to my cloudflare tunnel. I've regenerated the token multiple times, am forcring http2 protocol, even tried setting up a new tunnel - all with the same results. And to note on the CloudFlare dashboard my tunnel will oscillate between Healthy -> Degraded -> Down and then back to Healthy again.

Any update on this?

[machintrucbidule]

Same issue here

2025-03-04T23:13:08Z ERR Failed to serve tunnel connection error="context canceled" connIndex=0 event=0 ip=198.41.200.193
2025-03-04T23:13:08Z INF Retrying connection in up to 1s connIndex=0 event=0 ip=198.41.200.193
[...]
2025-03-04T23:15:16Z ERR  error="context canceled" connIndex=3 event=1 ingressRule=0 originService=http://192.168.1.37:4533
2025-03-04T23:15:16Z ERR Request failed error="context canceled" connIndex=3 dest=https://xxx.mydomain.com/xxxx event=0 ip=198.41.192.77 type=http

Everything was working fine since 2 years, and I'm now facing connectivity issues using cloudflare tunnels

[timrettop]

I also noticed this error occurring, tested with the latest docker image and 2025.1.1 and both showed this error.
I regenerated my cloudflare token and restarted (on latest 2025.2.1) and still receive the error.
Multiple connIndex's error the same:

cf  | 2025-03-06T13:50:32.044915305Z 2025-03-06T13:50:32Z ERR  error="context canceled" connIndex=3 event=1 ingressRule=0 originService=https://---------
cf  | 2025-03-06T13:50:32.044947649Z 2025-03-06T13:50:32Z ERR Request failed error="context canceled" connIndex=3 dest=https://example.com/path event=0 ip=--- type=http

[kuerious]

Multiple tunnel connections on multiple devices in multiple locations, tunnels running on hardware devices and VMs:

All of my Cloudflare tunnels are down. HA included. No warning, and no amount of refreshing the token seems to fix the issue. This is now March 10 of 2025, using the latest (2025.2.1) pull of the tunnel connector and "cloudflare/cloudflared" as well. [Ignore the quic-go buffer issues, I'll get to that later (thanks, Linux, btw)]:

3051787e3bba: Pull complete Digest: sha256:03737f27c38ecfb257a55664953cac510727cf27052c51ddb7c8ff1a2b9969e1 Status: Downloaded newer image for cloudflare/cloudflared:latest 2025-03-10T06:49:46Z INF Starting tunnel tunnelID=5a5a30f4-c440-48f8-b1a4-ad58369c8196 2025-03-10T06:49:46Z INF Version 2025.2.1 (Checksum a08167aafc749f0c6dbdd0df3c82fc72f9de0d3e47a66959d7ed7a5d603a4a76) 2025-03-10T06:49:46Z INF GOOS: linux, GOVersion: go1.22.5-devel-cf, GoArch: arm64 2025-03-10T06:49:46Z INF Settings: map[no-autoupdate:true token:*****] 2025-03-10T06:49:46Z INF Generated Connector ID: e5933fea-5d2f-4939-a894-1d6325fa5d0c 2025-03-10T06:49:46Z INF Initial protocol quic 2025-03-10T06:49:46Z INF ICMP proxy will use 172.17.0.3 as source for IPv4 2025-03-10T06:49:46Z INF ICMP proxy will use ::1 in zone lo as source for IPv6 2025-03-10T06:49:46Z INF ICMP proxy will use 172.17.0.3 as source for IPv4 2025-03-10T06:49:46Z INF ICMP proxy will use ::1 in zone lo as source for IPv6 2025-03-10T06:49:46Z INF Starting metrics server on [::]:20241/metrics 2025-03-10T06:49:46Z INF Using [CurveID(4588) CurveID(25497) CurveP256] as curve preferences connIndex=0 event=0 ip=1 98.41.192.37 2025/03/10 06:49:46 failed to sufficiently increase receive buffer size (was: 208 kiB, wanted: 7168 kiB, got: 416 kiB ). See https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes for details. 2025-03-10T06:49:46Z ERR Failed to serve tunnel connection error="context canceled" connIndex=0 event=0 ip=198.41.192 .37 2025-03-10T06:49:46Z INF Retrying connection in up to 2s connIndex=0 event=0 ip=198.41.192.37 2025-03-10T06:49:47Z INF Tunnel server stopped 2025-03-10T06:49:47Z ERR Initiating shutdown error="context canceled" 2025-03-10T06:49:47Z INF Metrics server stopped 2025-03-10T06:49:47Z ERR icmp router terminated error="context canceled" context canceled

[2004seraph]

I had this issue, my mistake was not updating the config.yml with the new UUID. Specifically, check the tunnel and credentials-file options and ensure they're correct.

[patriiiiiiiiiick]

I had this issue, my mistake was not updating the config.yml with the new UUID. Specifically, check the tunnel and credentials-file options and ensure they're correct.

Would that be with a manual setup? I have not touched such files in my fresh configuration.

[patriiiiiiiiiick]

I am getting this kind of error when trying to view the log of an add-on. Is this the same issue?

2025-04-24T15:38:05Z ERR error="context canceled" connIndex=1 event=1 ingressRule=0 originService=http://homeassistant:8123 2025-04-24T15:38:05Z ERR Request failed error="context canceled" connIndex=1 dest=https://prefix.domain.eu/api/hassio/addons/9074a9fa_cloudflared/logs/follow?lines=100 event=0 ip=198.41.200.233 type=http

[ShitijHalder]

Same issue with me, cannot figure out what to.
I am thinking of again making the tunnel after deleting the present one which is having issues. If anyone got any clue or a fix kindly let me know.