Start outside
External reachability and certificate behavior are distinct from the application process and must be diagnosed separately.
Layered diagnostics
Check the path from DNS and TLS through routing, protection, connector, local app, and the external request, then focus on the layer that needs attention.
See how it worksExternal reachability and certificate behavior are distinct from the application process and must be diagnosed separately.
Routing and access policy come before connector reachability and local-app behavior.
A useful diagnosis names the failing layer and a safe next check instead of returning a generic connection error.