CRITICALAWSCloud
CloudFront returning 504 Gateway Timeout from origin
awscloudfrontcdntimeoutperformance
Symptoms
- Users intermittently receive 504 errors from CloudFront URLs
- CloudFront logs show origin response timeout
- Origin server appears healthy when accessed directly
- Issue worse during high traffic periods
Root Cause
- Origin response time exceeds CloudFront default timeout of 30 seconds
- Origin server under-provisioned for the incoming request volume
- Database queries at origin layer running slowly
- Network latency between CloudFront edge and origin server
Diagnosis
- Check CloudFront logs for 504 errors and origin response times
- Access origin server directly to measure response time
- Review CloudWatch metrics for origin server CPU and memory
- Use trace tools to identify slow downstream dependencies
Fix
Prevention
- Set up CloudWatch alarms for 504 error rate > 1%
- Implement origin shielding for high-traffic distributions
- Use origin failover with secondary origin for high availability
- Regularly load test origin capacity