System Impairment: CloudFront Edge IPs timing out on port 443

Question

We have 6 CloudFront distributions where custom domain HTTPS connections 
timeout, but HTTP works perfectly. The CloudFront default domain works with 
HTTPS.

Evidence:
- project7art.com normally resolves to 2600:9000:2029:5000:f:8842:d2c0:93a1 
  (port 443 timeout)
- When forced to resolve to 2600:9000:2029:4600:f:8842:d2c0:93a1, HTTPS 
  works perfectly (200 OK in 0.4s)

This indicates CloudFront DNS is routing custom domains to edge IPs with 
port 443 issues.

Affected Distribution IDs:
- E2F9NTGYO2MA6E (project7art.com)
- EPKAGRFHK6X3E (oldrootsbarbershop.com)
- E1ATETZ6ZK7ZMD (floatinprettyballoons.com)
- E3DXK3QJZLMSF7 (thr33gems.com)
- E3J5J57H9WDRWK (jetstreams.tech)
- E389WVQHU90KZM (sosaabeauty.com)

All configurations verified correct:
- SSL certificates: ISSUED and attached
- DNS: Correct (Route53/Hostinger alias to CloudFront)
- S3: Content present
- HTTP: Working on all domains
- CloudFront default domain HTTPS: Working

Issue appears to be at the edge routing level where custom domains are 
being routed to unhealthy edge IPs.

Riku_Kobayashi · Answer

Hello.

Will the problem still occur if I connect from a different ISP?
I recommend that you determine whether the problem lies with your network environment or with AWS before contacting AWS support.
Incidentally, when I tried name resolution from my home, it worked as follows, and I was unable to reproduce the same problem as you.

dig project7art.com AAAA

; <<>> DiG 9.18.39-0ubuntu0.24.04.5-Ubuntu <<>> project7art.com AAAA
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13407
;; flags: qr rd ra; QUERY: 1, ANSWER: 8, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;project7art.com.               IN      AAAA

;; ANSWER SECTION:
project7art.com.        60      IN      AAAA    2600:9000:291e:e200:f:8842:d2c0:93a1
project7art.com.        60      IN      AAAA    2600:9000:291e:2000:f:8842:d2c0:93a1
project7art.com.        60      IN      AAAA    2600:9000:291e:ec00:f:8842:d2c0:93a1
project7art.com.        60      IN      AAAA    2600:9000:291e:fe00:f:8842:d2c0:93a1
project7art.com.        60      IN      AAAA    2600:9000:291e:f800:f:8842:d2c0:93a1
project7art.com.        60      IN      AAAA    2600:9000:291e:e00:f:8842:d2c0:93a1
project7art.com.        60      IN      AAAA    2600:9000:291e:1000:f:8842:d2c0:93a1
project7art.com.        60      IN      AAAA    2600:9000:291e:e000:f:8842:d2c0:93a1

;; Query time: 19 msec
;; SERVER: 10.255.255.254#53(10.255.255.254) (UDP)
;; WHEN: Tue Jun 09 22:06:42 JST 2026
;; MSG SIZE  rcvd: 268

System Impairment: CloudFront Edge IPs timing out on port 443

Add your answer

Relevant content