Cannot connect to the console of my service - both via web interface and railway client
rbk001
PROOP

2 days ago

when trying to connect to the console of the service via web interfaces I am getting:

An error occurred connecting to your service. Please try again.

I am gettign the same error when using railway cli:

railway ssh --project=id --environment=id --service=id

An error occurred connecting to your service. Please try again.

Connection to ssh.railway.com closed.

Awaiting User Response

3 Replies

Status changed to Awaiting Railway Response Railway • 2 days ago


dizzydes90
EMPLOYEE

2 days ago

SSH and the Console are failing because vicnezknihy has static outbound IPs enabled. The two don't work together right now: the container can't open its tunnel back to our SSH relay through the static-IP path, which is why the session drops after about 9 seconds even though your key is accepted. It isn't your image or configuration, and redeploying won't change it. We aim to have this fixed in the coming weeks and we'll reply here when it ships.

If you need a shell before then, turning static outbound IPs off and redeploying restores SSH, but the service's outbound IP changes, so only do that if nothing on your side allowlists the current IPs.


Status changed to Awaiting User Response Railway • 1 day ago


kylekeesling
PRO

2 days ago

After the recent incident I turned on static IPs so I could implement firewall rules for my database. Are you saying that if I want to do that I lose SSH functionality? If so are there any plans to support it at some time in the future? Are there any suggested workarounds?


Status changed to Awaiting Railway Response Railway • 1 day ago


dizzydes90
EMPLOYEE

2 days ago

Yes, for now that's the trade-off: while static outbound IPs are enabled on a service, SSH and the Console can't connect to it, so a database firewall that only allows those IPs means doing without a shell until we fix it. It's a bug on our side, not a design decision, and the fix is in progress. We aim to ship it in the coming weeks and we'll reply here when it's out.

The only workaround today is the one above: turn static outbound IPs off and redeploy, which restores SSH but changes the service's outbound IP, so your database firewall would need updating too. If you can live without a shell for a while, keeping static IPs on and waiting for the fix is the safer option for your firewall rules.


Status changed to Awaiting User Response Railway • 1 day ago


Welcome!

Sign in to your Railway account to join the conversation.

Loading...