We tested connectivity to www.ventanillaunica.gob.mx from two environments.

From Railway:

- DNS resolution succeeds

- TCP connection to port 443 times out

From GitHub Actions (external runtime), using a workflow that performs DNS, TCP 443, and HTTPS GET checks with legacy DH TLS compatibility enabled:

- DNS succeeds

- TCP 443 succeeds

- HTTPS requests to the COVE, Digitalización, and Pedimentos WSDL endpoints return HTTP 200

This isolates the issue to Railway outbound connectivity / egress path toward VUCEM, not the application or a general outage of the remote service.

From Railway runtime, DNS for www.ventanillaunica.gob.mx resolves correctly to 200.33.74.161, but TCP connect to 443 times out consistently. From another external runtime, TCP 443 succeeds. This indicates an outbound connectivity/egress issue specific to Railway or its source IP path to VUCEM, before TLS/HTTP/SOAP. This wasnt ocurring as of 2 hours ago.

{"ok": false, "timeout_seconds": 15, "force_http_checks": false, "host": "www.ventanillaunica.gob.mx", "gateway_enabled": false, "gateway_base_url_configured": false, "tls_legacy_dh": true, "tls_skip_verify": false, "app_process": "web", "debug": false, "dns": {"ok": true, "host": "www.ventanillaunica.gob.mx", "addresses": ["200.33.74.161"], "duration_ms": 0, "error": ""}, "tcp_443": {"ok": false, "host": "www.ventanillaunica.gob.mx", "port": 443, "duration_ms": 15015, "remote_address": "", "attempts": [{"address": "200.33.74.161", "ok": false, "duration_ms": 15015, "error": "timed out", "exception_class": "TimeoutError"}], "error": "timed out", "exception_class": "TimeoutError"}, "checks": [{"name": "cove_wsdl", "url": "https://www.ventanillaunica.gob.mx/ventanilla/ConsultarEdocumentService?wsdl", "reachable": false, "ok": false, "status_code": null, "final_url": "", "content_type": "", "duration_ms": 0, "error": "Omitido: la conexion TCP al puerto 443 ya fallo desde este runtime.", "exception_class": "", "skipped": true}, {"name": "digitalizacion_wsdl", "url": "https://www.ventanillaunica.gob.mx/ventanilla/DigitalizarDocumentoService?wsdl", "reachable": false, "ok": false, "status_code": null, "final_url": "", "content_type": "", "duration_ms": 0, "error": "Omitido: la conexion TCP al puerto 443 ya fallo desde este runtime.", "exception_class": "", "skipped": true}, {"name": "pedimentos_wsdl", "url": "https://www.ventanillaunica.gob.mx/ventanilla-ws-pedimentos/ConsultarPedimentoCompletoService?wsdl", "reachable": false, "ok": false, "status_code": null, "final_url": "", "content_type": "", "duration_ms": 0, "error": "Omitido: la conexion TCP al puerto 443 ya fallo desde este runtime.", "exception_class": "", "skipped": true}], "hostname": "3e7e0f44a527", "timestamp": "2026-04-28T22:32:31.281029+00:00"}