Cloudflare Error 1033: Argo Tunnel Error
Error 1033 indicates a problem with a Cloudflare Tunnel (previously called Argo Tunnel) connection. Cloudflare Tunnels let you connect your origin server to Cloudflare's network without opening public inbound ports — instead, the cloudflared daemon on your server creates an outbound-only encrypted tunnel. Error 1033 means the tunnel is either not running, has disconnected, or cannot route the request to the configured local service.
Status
Error 1033: Argo Tunnel ErrorExample
GET /internal/app HTTP/1.1
Host: tunnel.example.com
User-Agent: Mozilla/5.0
Accept: text/htmlHTTP/1.1 530
Server: cloudflare
CF-RAY: 7c3d4e5f6a7b8902-HEL
Content-Type: text/html
<!doctype html>
<html>
<head>
<title>tunnel.example.com | Error 1033</title>
</head>
<body>
<h1>Error 1033: Argo Tunnel error</h1>
<p>Cloudflare could not reach the origin server through the configured Cloudflare Tunnel. The tunnel may be offline. Please contact the site owner.</p>
</body>
</html>How to Troubleshoot
Check if cloudflared is running
SSH into your server and verify the cloudflared daemon is running.
systemctl status cloudflared
Check tunnel status in the dashboard
Go to Zero Trust > Networks > Tunnels in the Cloudflare dashboard. Verify your tunnel shows as Healthy/Active.
Verify ingress rules
Check your cloudflared config.yml to ensure the hostname in question has a matching ingress rule that routes to the correct local service.
cat /etc/cloudflared/config.yml
Restart cloudflared
If the daemon is running but the tunnel is unhealthy, restart it to re-establish the connection.
systemctl restart cloudflared
Common Causes
cloudflared daemon is not running
highThe cloudflared process on your origin server has stopped, crashed, or was never started. Without it, the tunnel does not exist.
Tunnel is disconnected
mediumThe cloudflared daemon is running but has lost its connection to Cloudflare's network — possibly due to network issues, firewall changes, or resource exhaustion on the server.
Tunnel configuration does not match the hostname
mediumThe tunnel's ingress rules do not include a route for the hostname being requested, so cloudflared does not know where to forward the request.
Related Error Codes
Web Server Is Down
The origin web server refused or is not accepting connections from Cloudflare.
Connection Timed Out
Cloudflare's TCP connection to the origin server timed out.
Origin Is Unreachable
Cloudflare cannot reach the origin server because DNS resolution failed or the origin IP is unreachable.
Frequently Asked Questions
This reference was compiled from official RFCs, protocol specifications, and hands-on troubleshooting experience. AI tools were used primarily for formatting and organizing the content on the page.