custom domain has a freshly issued valid SNI cert and syncStatus: ACTIVE, but every edge node returns HTTP 404
koulsami
PROOP

a month ago

Hi Railway support,

My custom domain has a freshly issued valid SNI cert and syncStatus: ACTIVE, but every edge node returns HTTP 404 Application not found with x-railway-fallback: true.

Details:

Custom domains (both affected):

anthros.reshuffleai.com — domain ID 57336b63

mcp.anthros.reshuffleai.com — domain ID ea9b25b9-8fd4-4d4d-b525-a0e40445ddf6

CNAME targets (DNS confirmed exact-match against the API's requiredValue):

anthros.reshuffleai.com → qgftt8y2.up.railway.app

mcp.anthros.reshuffleai.com → y0pwqbyp.up.railway.app

Service: f6e0ead3-392a-4387-8401-8ef97aa32090

Project: 8848f0e3-e037-452a-8b0c-609c0b7577 (please confirm full ID from account — see note below)

certificateStatus: VALID (Let's Encrypt, valid to 2026-10-13)

syncStatus: ACTIVE, edge assigned

DNS propagated and correct; CAA: none on reshuffleai.com (no CA block)

Railway-provided *.up.railway.app domain works normally (200)

Current deployment: 7b26eeec

Reproducing the issue:

HTTPS handshake succeeds and serves the correct per-domain SNI cert

Request then returns 404 {"status":"error","code":404,"message":"Application not found"}

Response header includes x-railway-fallback: true

Sample edge request IDs from the 404s (for tracing): tptNk3-4QX-lsTVacI7Nw, jK-yG_yQduJl5vl0ubPiw

Already tried (no effect):

customDomainIssueCertificate — worked; cert flipped VALIDATING_OWNERSHIP → VALID in ~10 min

customDomainUpdate — no effect after 4+ min

Full service redeploy — SUCCESS, clean cutover, no effect after 15 min

This looks like the control plane reports ACTIVE/VALID, but the edge routing entry is not attached — the SNI/cert layer resolved while the HTTP route did not. Please force a route re-sync or investigate a stale edge attachment.

Thanks,

Sameer

$20 Bounty

1 Replies

Railway
BOT

a month ago

This thread has been opened as a public bounty so the community can help solve it. The thread and any further activity are now visible to everyone.

Status changed to Open Railway about 1 month ago


You need to add a TXT record to _railway-verify.mcp.anthros.reshuffleai.com. You can get the content for it from the verificationToken property under status.


Welcome!

Sign in to your Railway account to join the conversation.

Loading...