Connection Issues: Debugging Network Problems
Systematically diagnose and resolve network connectivity problems that prevent your OpenClaw agent from communicating with external services.
What You Will Get
By the end of this guide, you will have a systematic approach to diagnosing and fixing network connectivity issues affecting your OpenClaw agent. You will know how to identify whether the problem is on your end, the external service's end, or somewhere in between.
Connection issues are among the most common problems in production deployments. They range from simple DNS resolution failures to complex firewall misconfigurations. Without a structured debugging process, you can waste hours chasing the wrong cause.
You will learn to use the RunTheAgent diagnostic tools, read connection logs, test endpoints manually, and apply fixes for the most common connectivity failures. The result is a reliable troubleshooting workflow that gets your agent back online quickly.
Step-by-Step Debugging
Follow these steps to diagnose and fix connection issues.
Check the Status Dashboard
Start by opening the RunTheAgent status dashboard. Check whether there are any ongoing platform incidents that might be affecting connectivity. If there is a known issue, the dashboard will show the status and expected resolution time. This step saves you from debugging a problem that is already being handled.
Review Connection Logs
Open your agent's logs and filter for connection errors. Look for error messages like 'ECONNREFUSED', 'ETIMEDOUT', 'ENOTFOUND', or HTTP status codes in the 500 range. Note the timestamp, the target URL, and the error type. This information narrows down the cause significantly.
Test the Target Endpoint
Use the built-in endpoint tester in the RunTheAgent dashboard to send a request to the failing URL. This confirms whether the endpoint is reachable from the platform. If the test succeeds but your agent still fails, the issue is likely in the agent's configuration rather than the network.
Verify DNS Resolution
If the error is ENOTFOUND, the domain name cannot be resolved. Check that the URL is spelled correctly and that the domain's DNS records are active. If you recently changed DNS records, allow up to 48 hours for propagation. You can also try using the IP address directly to bypass DNS.
Check Firewall and IP Allowlists
If the endpoint requires IP allowlisting, verify that RunTheAgent's outbound IP addresses are included in the allowlist. The platform's IP ranges are listed in the Network Settings panel. A missing IP entry is one of the most common causes of connection refused errors.
Inspect TLS and Certificate Issues
If the error mentions TLS or certificate validation, the target server may have an expired or self-signed certificate. Check the certificate expiry date and chain. Self-signed certificates require explicit trust configuration in the agent's connection settings.
Increase Timeout Values
If you see timeout errors but the endpoint eventually responds when tested manually, the connection timeout may be too low. Increase the timeout in your agent's connection settings. Start with 30 seconds and reduce it once the issue is resolved to find the right balance.
Tips and Best Practices
Keep a Connection Runbook
Document every connection issue you encounter and how you resolved it. Over time, this runbook becomes a quick reference that lets you fix recurring problems in minutes instead of hours.
Set Up Health Checks
Configure periodic health checks that ping your critical external endpoints. If a health check fails, you get an alert before users notice the problem. This proactive approach minimizes downtime.
Use Retry Logic with Backoff
Transient connection failures are normal. Configure your agent to retry failed requests with exponential backoff. Three retries with 1, 2, and 4 second delays resolve most transient issues automatically.
Monitor Response Times
Track response times for all external connections. A gradual increase in response time often precedes a full outage. Catching the trend early gives you time to investigate before the connection fails completely.
Frequently Asked Questions
Related Pages
Ready to get started?
Deploy your own OpenClaw instance in under 60 seconds. No VPS, no Docker, no SSH. Just your personal AI assistant, ready to work.
Starting at $24.50/mo. Everything included. 3-day money-back guarantee.