421 Misdirected Request

[imorandin]

Hi,

We are still experiencing the 421 Misdirected Request error on CloudLinux servers.
According to cPanel, the issue seems to have already been addressed on their side.

We followed the steps from this article:
421 Misdirected Request Error After Recent ea-apache Update

However, the error persists.

Could you please confirm if this is still an open issue on CloudLinux and if there is an additional workaround or patch we should apply?

Thanks in advance.

Ignacio

[bogdan.sh]

Hi,

The solution is accurate, what versions are you using? Please show the results of:

rpm -q ea-apache24
rpm -q ea-nginx

[imorandin]

Hi Bodgan,

Sure:

# rpm -q ea-apache24
ea-apache24-2.4.65-3.el9.cloudlinux.x86_64
# rpm -q ea-nginx
ea-nginx-1.26.3-15.el9.cloudlinux.x86_64

# yum update ea-apache24* ea-nginx --enablerepo=cl-ea4
This system is receiving updates from CloudLinux Network server.
Last metadata expiration check: 0:32:18 ago on Mon Sep 1 11:55:51 2025.
Dependencies resolved.
Nothing to do.
Complete!

and lots of SNI errors in Apache logs (and 421 sometimes):

[Mon Sep 01 12:27:00.265580 2025] [ssl:error] [pid 1975366:tid 1975366] [client 50.6.205.26:0] AH02032: Hostname www.xxxxx.com provided via SNI and hostname yyyyyy.com provided via HTTP have no compatible SSL setup

The only solution so far is to perform a downgrade:

yum downgrade ea-nginx
yum downgrade ea-apache24

# rpm -q ea-apache24
ea-apache24-2.4.64-3.el9.cloudlinux.x86_64
# rpm -q ea-nginx
ea-nginx-1.26.3-11.el9.cloudlinux.x86_64

And everything works as expected.

Ignacio

[bogdan.sh]

Something is not right, this should be opposite. The downgraded packages should produce 421 Misdirected Request. I just found another internal discussion about bad certs being the issue, and recommented solution was https://support.cpanel.net/hc/en-us/...erse-Proxy-421 . Could you please check this as well?