XX-net/XX-Net · warning

Control Req %s %s %s

Error message

Control Req %s %s %s

What it means

The cloudflare_front web control HTTP server received a GET for an unknown path; it responds 404 and logs the client address, method and path.

Source

Thrown at code/default/x_tunnel/local/cloudflare_front/web_control.py:41

class ControlHandler(simple_http_server.HttpServerHandler):
    def __init__(self, client_address, headers, command, path, rfile, wfile):
        self.client_address = client_address
        self.headers = headers
        self.command = command
        self.path = path
        self.rfile = rfile
        self.wfile = wfile

    def do_GET(self):
        path = urlparse(self.path).path
        if path == "/log":
            return self.req_log_handler()
        elif path == "/ip_list":
            return self.req_ip_list_handler()
        elif path == "/debug":
            return self.req_debug_handler()
        else:
            front.logger.warn('Control Req %s %s %s ', self.address_string(), self.command, self.path)

        self.wfile.write(b'HTTP/1.1 404\r\nContent-Type: text/plain\r\nConnection: close\r\n\r\n404 Not Found')
        front.logger.info('%s "%s %s HTTP/1.1" 404 -', self.address_string(), self.command, self.path)

    def req_log_handler(self):
        req = urlparse(self.path).query
        reqs = self.unpack_reqs(parse_qs(req, keep_blank_values=True))
        data = ''

        cmd = "get_last"
        if reqs["cmd"]:
            cmd = reqs["cmd"]

        if cmd == "get_last":
            max_line = int(reqs["max_line"])
            data = front.logger.get_last_lines(max_line)
        elif cmd == "get_new":
            last_no = int(reqs["last_no"])

View on GitHub (pinned to cfa5bc17b6)

Solutions

  1. Use one of the documented control paths
  2. Ignore; purely informational
  3. Restrict access to the control port
Defensive patterns

Strategy: validation

Validate before calling

known = {'/info','/log','/ip_list','/debug'}
if path not in known: return_404()

Prevention

When it happens

Trigger: Any request to the control port whose path is not /info, /log, /ip_list, /debug etc.

Common situations: Browsers or health probes hitting the control port root path '/'; port scanning.

Related errors

AI-assisted analysis of XX-net/XX-Net@cfa5bc17b6 (2026-08-27). Data as JSON: /api/errors/a53c30e4fd2ffe7d. Report an issue: GitHub.