Common issues and how to fix them.
Symptoms:
- "Connection refused" error
- Red status indicator
- Timeout when clicking "Connect"
Diagnosis:
-
Test basic connectivity:
ping receiver.example.com
If this fails, you can't reach the receiver at all (DNS or network issue).
-
Test receiver port:
nc -zv receiver.example.com 9997
If this fails, the receiver is down or port 9997 is blocked.
-
Check your profile configuration:
- Hostname should match what IT provided
- Port defaults to 9997 (only add
:portif different)
Solutions:
- Network issue: Contact your network admin
- Receiver down: Contact your IT admin
- Wrong hostname: Update your profile with the correct receiver URL
- Firewall: Ask IT to allow outbound connections to port 9997
Symptoms:
- Browser opens but login fails
- "Authentication failed" error after entering credentials
- Stuck on "Authenticating..." screen
Diagnosis:
-
Try authenticating in an incognito/private browser window
- If this works, your browser cookies/cache are stale
-
Check the auth URL in the browser
- Should redirect to your identity provider (Okta, Keycloak, etc.)
- If it 404s or redirects to the wrong place, auth config is broken
-
Verify your credentials work elsewhere
- Try logging into your company's SSO portal with the same credentials
Solutions:
- Stale cookies: Clear browser cache, or use incognito mode
- Wrong identity provider: Contact IT (receiver config may have changed)
- Account locked: Contact IT to unlock your account
- Permissions changed: Ask IT to verify your access
Symptoms:
- Green "Connected" → Red "Disconnected" within seconds
- No services appear
Diagnosis:
-
Check logs:
- macOS:
~/Library/Logs/SocketZero/ - Windows:
%APPDATA%\SocketZero\logs\ - Linux:
~/.config/socketzero/logs/
- macOS:
-
Look for errors related to:
- WebSocket connection failures
- Certificate validation errors
- Authorization failures
Solutions:
- Certificate issue: Your system may not trust the receiver's TLS cert. Contact IT.
- Authorization: Your user/role may not be allowed. Contact IT.
- Receiver restart loop: Receiver is unstable. Contact IT.
Symptoms:
- Service tile shows "Connected"
- But
ssh service.localor browser connection fails
Diagnosis:
-
Test the tunnel:
nc -zv service.local PORT
Replace
PORTwith the service port (e.g., 22 for SSH, 80 for HTTP).- Succeeds: Tunnel works, issue is with service authentication
- Fails: Tunnel broken or service down
-
Check SocketZero logs for tunnel errors
Solutions:
- Tunnel broken: Disconnect and reconnect
- Service down: Contact IT (the remote service is offline)
- Wrong credentials: Verify username/password for the service itself (not SocketZero)
Causes:
- Tunnel not open
- SSH service down on remote host
- Firewall blocking SSH on remote host
Diagnosis:
-
Verify tunnel is active:
- Service tile should show "Connected" in SocketZero
-
Test SSH port:
nc -zv service.local 22
-
Try verbose SSH:
ssh -vvv username@service.local
This shows where the connection fails.
Solutions:
- Tunnel not open: Click the service tile in SocketZero first
- SSH down: Contact IT
- Firewall: Ask IT to allow SSH on the remote host
Symptoms:
- Click service tile
- Browser opens but shows "Can't connect" or timeout
Diagnosis:
-
Check the URL:
- Should be something like
http://myapp.local:8080 - Verify port matches the service config
- Should be something like
-
Test manually:
curl http://myapp.local:8080
-
Check browser console for errors
Solutions:
- Wrong port: Check service tile for correct port
- HTTPS required: Try
https://instead ofhttp:// - Service down: Contact IT
Symptoms:
- Tunnel works but is very slow
- High latency
Diagnosis:
-
Test your network speed:
ping receiver.example.com
High ping times (>100ms) indicate network issues.
-
Check receiver load:
- Contact IT to see if receiver is overloaded
Solutions:
- Network congestion: Use wired connection instead of Wi-Fi
- Receiver overloaded: IT may need to scale up capacity
- Distance: If receiver is far away geographically, latency is expected
Symptoms:
- SocketZero using significant CPU
- Fan noise / battery drain
Diagnosis:
-
Check how many tunnels are active:
- Disconnect from unused services
-
Look for crash loops in logs
Solutions:
- Too many tunnels: Close unused services
- Crash loop: Restart SocketZero, check logs, report issue
- Bug: Report to SocketZero team with logs
Solution:
- Right-click SocketZero in Applications
- Click "Open"
- Click "Open" in the dialog
OR
xattr -d com.apple.quarantine /Applications/SocketZero.appSolution:
chmod +x /Applications/SocketZero.app/Contents/MacOS/SocketZeroSolution:
- Open Windows Security
- Go to "Virus & threat protection"
- Click "Manage settings"
- Add SocketZero to exclusions
Solution:
Right-click the installer and choose "Run as administrator".
Debian/Ubuntu:
sudo apt-get install -fFedora/RHEL:
sudo dnf install missing-packageMake it executable:
chmod +x SocketZero-*.AppImage
./SocketZero-*.AppImageIf none of these solutions work:
-
Collect logs:
- Enable debug mode:
SOCKETZERO_DEBUG=1 - Reproduce the issue
- Locate logs (see paths above)
- Enable debug mode:
-
Open an issue:
- GitHub Issues
- Include:
- OS and version
- SocketZero version
- Steps to reproduce
- Relevant log snippets (redact sensitive info)
-
Contact support:
- Email: support@radiusmethod.com
- Include the same info as above