Troubleshooting in Cloud CDN

Below is the list of common issues with Cloud CDN and ways to fix them.

The CDN responds to file requests with 3xx codes (redirect)The CDN responds to file requests with 3xx codes (redirect)

Make sure to specify the following resource settings:

• Protocol used by the origins as the primary one (HTTP or HTTPS). If origins redirect requests from http URIs to https URIs, select HTTPS for the resource, and vice versa.

• Host HTTP header value to which origins respond without redirects.

  For example, if the header value is set to www.example.com, and origins redirect requests with this value to example.com, change the value in the settings to example.com.

The CDN responds to file requests with 4xx codes (client error)The CDN responds to file requests with 4xx codes (client error)

Make sure that:

• The resource settings allow end-user access to content.

• Origins return files in response to direct requests, bypassing the CDN.

• Origins allow and correctly process requests that match the resource settings:

  • Over the specified protocol: HTTP or HTTPS.
  • With the specified value of the Host HTTP header and other headers.

The CDN responds to file requests with 5xx codes (server error)The CDN responds to file requests with 5xx codes (server error)

Make sure that:

• Origins respond to CDN server requests within 5 seconds.

• Origins allow and correctly process requests that match the resource settings:

  • Over the specified protocol: HTTP or HTTPS.
  • With the specified value of the Host HTTP header and other headers.

Also, check the Cloud CDN status here.

Updated settings failed to apply to the resourceUpdated settings failed to apply to the resource

It may take up to 15 minutes for the new settings of the existing resource to apply to the CDN servers. After that, we recommend purging the resource cache.

The CDN resource has the Not active status, preventing content delivery to usersThe CDN resource has the Not active status, preventing content delivery to users

Resources can show as Not active due to receiving no user requests for 90 days or being deactivated manually. To make them active again, enable End-user access to content in the basic resource settings. To enable or disable resources, you need the cdn.editor role or higher.

Unable to configure the TLS certificateUnable to configure the TLS certificate

Certificates from Yandex Certificate Manager are supported. You can issue a new Let's Encrypt® certificate or upload one of your own.

The certificate must be located in the same folder as your CDN resource.

Below is an example of a CLI error you receive when the certificate and the CDN resource reside in different folders:

ERROR: operation (id=bcdb6qaiw8mb********) failed: rpc error: code = InvalidArgument desc = folder ids of user and certificate don't match; operation-id: bcdb6qaiw8mb********