I figured out the issue with DNS but I need help from SUPPORT

[rberkes]

Subject: Apex TLS fails on one Netlify anycast IP (manufacturingchina.com)

Hi Netlify team,

My apex domain intermittently fails TLS. Testing shows one of the two A-record IPs is bad:

Good IP:
curl -Iv --resolve manufacturingchina.com:443:75.2.60.5 https://manufacturingchina.com/
→ HTTP/2 200, LE E7 cert OK
x-nf-request-id: 01K3EVZSMMTP0EEQPXN5WY3N87
Time: 2025-08-24 20:23:18 UTC

Bad IP:
curl -Iv --resolve manufacturingchina.com:443:99.83.190.102 https://manufacturingchina.com/
→ LibreSSL/3.3.6: error:1404B438:SSL routines:ST_CONNECT:tlsv1 alert internal error

Additional context:

• DNS is Netlify DNS.
• APEX A records were 75.2.60.5 and 99.83.190.102.
• No AAAA, no CAA, DNSSEC disabled.
• openssl s_client shows a valid Let’s Encrypt E7 cert for manufacturingchina.com and www.

Could you please reseed/refresh TLS config for the apex on edge IP 99.83.190.102 (or remove it from rotation) and confirm when it’s fixed? I’ve temporarily removed 99.83.190.102 from my A records to stabilize traffic.

Thanks!

[nathanmartin]

@rberkes 99.83.190.102 is not a Netlify IP address.

You were likely supplied it by an “AI” which has misled you.

If you check the Netlify documentation you will see that you should set only 75.2.60.5

See:

"SSL failing intermittently on dawnofaging.com due to broken edge IP (99.83.190.102)"

The IP address you mention, 99.83.190.102, is incorrect. You’ll want to remove any A record pointing to that address.

Site unstable with SSL error on and off

Hi, @Antony_RObinson. Would you please confirm which chat bot provided the IP address 99.83.190.102? I ask because that is not a correct IP address for Netlify. Other have reported that this is information ChatGTP is providing. Is that where you were told that 99.83.190.102 was the IP address to use? Please delete the A record for 99.83.190.102. That should resolve the issue but if not, please let us know with a reply here.