Support » Fixing WordPress » curl requests to wordpress.org blocked

  • Hi everyone and thanks for all the work people put into WordPress. It has helped me host several community websites over the last decade πŸ˜€

    I’ve had an issue for the past few weeks where my WordPress installation is unable to update or install plugins from the WordPress repository. I suspect that this is because I have been mistakenly blocked by the WordPress.org CDN, Akamai.

    In site health check, my WordPress site reports that it is unable to reach wordpress.org, returning the error:

    cURL error 28: Operation timed out after 10000 milliseconds with 0 out of 0 bytes received

    Updating plugins I get the error:
    Update failed: Download failed. cURL error 56: Recv failure: Connection reset by peer

    You can also see it under ‘WordPress Events and News’ when it tries to retrieve the RSS feeds:

    RSS Error: WP HTTP Error: cURL error 28: Operation timed out after 10001 milliseconds with 16033 bytes received
    
    RSS Error: WP HTTP Error: cURL error 35: OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to planet.wordpress.org:443 

    I have troubleshooted this elsewhere with a few other users and I am able to run CURL from the same machine on the commandline to all other sites except for wordpress.org and downloads.wordpress.org

    I have also tried removing all plugins, reinstalling wordpress from scratch and removing any router firewall (no firewall on server). None have had any effect.

    I noticed I am having a similar issue with nextcloud and have discovered that their app store is also run from Akamai CDN.

    I have contacted Akamai and asked them to remove the block against my IP. I can share my IPv4 which is behind CGNAT 89.36.71.91 but would rather not post my IPv6 address publicly. Akamai have responded that they would not remove any block, and it is up to their client (WordPress) to do so manually themselves.

    The only thing I can think of which might have caused such a block, and this is going to sound a bit ridiculous, but a few weeks ago the enter key on my keyboard got stuck down and I reloaded my website continuously for about a minute. Other than that, I’ve looked carefully and can’t see any reason I might have been flagged by the CDN. One other possibility is that because I’m behind CGNAT for IPv4, that address has been flagged for some other user.

    Would it be possible for someone from the wordpress.org team to unblock me from their Akamai interface? I can forward the email from Akamai regarding this alongside details of my IPv6.

    Ultimately the core functionality of the website continues to work, but I am slightly concerned that the longer plugins (and the site) go without updates, the more vulnerable it becomes to security risks or other issues.

    • This topic was modified 4 days, 11 hours ago by cestnickell. Reason: added link to discussion of CURL errors on reddit
    • This topic was modified 4 days, 11 hours ago by cestnickell.
Viewing 1 replies (of 1 total)
  • Moderator Yui

    (@fierevere)

    ゆい

    WordPress.org does not use any permanent blocking for peer IPs.
    Short blocks in case of burst requests are possible, but you should get error status 429 (too many requests)

    error 35: OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection

    Are you using (wrong) HTTP-proxy ?

    * Ensure you are using correct DNS, when connecting

    $ host wordpress.org
    wordpress.org has address 198.143.164.252
    $ host downloads.wordpress.org
    downloads.wordpress.org has address 198.143.164.250

    sometimes people put this address-IP pair into /etc/hosts
    IP is not guranteed to persists forever, sometimes it can change.

    * Ensure that your host does not block connections to WordPress.org
    or your ISP.. or somewhere in transit

    If you have checked those things and still are sure its problem on WordPress.org side – visit #meta channel on Slack and ask for assistance.

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.