Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
ERR_CONNECTION_REFUSED means Chrome could not establish a connection to the requested host and port: the service may not be listening, or a firewall, proxy, VPN, or other network control may have rejected the connection. It does not by itself prove that your internet is down or that the website has blocked you.
Start by checking the scope: does one website fail, many websites, or only a local address such as localhost? That distinction points to the right fix much faster than clearing cache or changing DNS at random.
What ERR_CONNECTION_REFUSED means
Chrome displays this error when a connection attempt is refused or blocked before the page can load. The problem can be at the destination server, somewhere between it and your device, or in your device’s own settings. Google describes the message as meaning the page did not let Chrome connect or was blocked: Chrome network errors.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →A connection is made to a particular address and port. If the service is stopped, listening on a different port, or unreachable under the address you used, there may be nothing there to accept it. An active firewall or policy can also reject it. A refusal is a symptom, not proof of a particular cause.
#1 Best Overall
- DUAL-BAND WIFI 6 ROUTER: Wi-Fi 6(802.11ax) technology achieves faster speeds, greater capacity and reduced network congestion compared to the previous gen. All WiFi routers require a separate modem. Dual-Band WiFi routers do not support the 6 GHz band.
- AX1800: Enjoy smoother and more stable streaming, gaming, downloading with 1.8 Gbps total bandwidth (up to 1200 Mbps on 5 GHz and up to 574 Mbps on 2.4 GHz). Performance varies by conditions, distance to devices, and obstacles such as walls.
- CONNECT MORE DEVICES: Wi-Fi 6 technology communicates more data to more devices simultaneously using revolutionary OFDMA technology
- EXTENSIVE COVERAGE: Achieve the strong, reliable WiFi coverage with Archer AX1800 as it focuses signal strength to your devices far away using Beamforming technology, 4 high-gain antennas and an advanced front-end module (FEM) chipset
- OUR CYBERSECURITY COMMITMENT: TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.
- ERR_NAME_NOT_RESOLVED: Chrome could not resolve the hostname to an address.
- ERR_CONNECTION_TIMED_OUT: the attempt received no response in time.
- ERR_CONNECTION_RESET: a connection was interrupted.
- Certificate error: a connection was made, but TLS certificate validation failed.
Chrome lists these as distinct network errors. A refused connection is not normally a cache problem, and flushing DNS will not make a stopped service start listening.
Choose the right troubleshooting path
| What fails? | Likely area | First useful test |
|---|---|---|
| One public website | URL, site server, CDN, or site-specific filtering | Try the site on another network or device. |
| Many websites on one device | Device connection, VPN, proxy, firewall, or security software | Try another browser and temporarily disconnect a VPN. |
| Only a local development address | Application process, port, bind address, or protocol | Check whether a service is listening on the URL’s port. |
| Local machine works, another device does not | Loopback-only binding, firewall, port publishing, or network isolation | Test the server’s LAN address and check its listening address. |
Chrome recommends first checking whether one site or several sites are affected, then testing browser and network causes: Chrome connection troubleshooting.
Fix a refusal when browsing public websites
- Check the address. Verify the spelling, hostname, protocol (
httporhttps), and any port after a colon. For example,http://example.com:8080andhttps://example.commay reach different services. Switching protocols helps only if the site is configured to accept the alternative. - Compare sites and browsers. Open another site, then try the failing URL in another browser. If only Chrome fails, open an Incognito window. If that works, disable extensions one at a time and retest; an extension or browser state may be involved. Clear browsing data only if the issue appears browser-specific, not as a general fix for a refused network connection.
- Test another network. Try a trusted alternate connection, such as cellular data. If the site works there but not on your usual network, investigate that network’s proxy, VPN, firewall, or filtering. If it fails for other people and across networks, the site’s hosting, reverse proxy, or firewall is more likely involved, though a regional or source-network rule can still cause different results.
- Check VPN and proxy settings. Disconnect a VPN briefly and retry. Review system or browser proxy settings, and check filtering extensions or corporate security agents. On a managed work device, ask IT before changing policy. Command-line tools may use proxy environment variables such as
HTTP_PROXY,HTTPS_PROXY, andNO_PROXY, so their behavior may differ from Chrome. - Inspect security filtering safely. A local firewall, antivirus, router firewall, or corporate gateway can reject connections. Check its event log or policy. If you temporarily pause a relevant protection for a controlled test, restore it immediately; use a narrow allow rule or ask the administrator for a lasting correction rather than leaving protection disabled.
- Restart only after isolating the scope. Restart Chrome or the device if the failure appears local. Restart a router only when multiple sites or devices on that network are affected. Chrome also recommends checking the connection and restarting networking equipment where appropriate in its troubleshooting guidance.
- Use DNS commands only when warranted. DNS issues more often produce a name-resolution error, but a stale hostname-to-address result can direct you to the wrong server. On Windows, Microsoft’s Wi-Fi troubleshooting steps include
ipconfig /flushdns,ipconfig /release, andipconfig /renew: Windows connectivity troubleshooting. These are not universal remedies for a closed port.
Public Wi-Fi may require a sign-in through a captive portal. Complete that sign-in if the network indicates it is required; a captive portal is one possible access issue, not the default explanation for a refusal.
Rank #2
- Dual-band Wi-Fi with 5 GHz speeds up to 867 Mbps and 2.4 GHz speeds up to 300 Mbps, delivering 1200 Mbps of total bandwidth¹. Dual-band routers do not support 6 GHz. Performance varies by conditions, distance to devices, and obstacles such as walls.
- Covers up to 1,000 sq. ft. with four external antennas for stable wireless connections and optimal coverage.
- Supports IGMP Proxy/Snooping, Bridge and Tag VLAN to optimize IPTV streaming
- Access Point Mode - Supports AP Mode to transform your wired connection into wireless network, an ideal wireless router for home
- Advanced Security with WPA3 - The latest Wi-Fi security protocol, WPA3, brings new capabilities to improve cybersecurity in personal networks
Check whether the website or server is refusing connections
Compare the same hostname from another device and network. A crowdsourced outage report can be a clue, but it does not prove that every region or user is affected. A site can work for some visitors while a particular CDN edge, address family, source IP range, or protocol is failing.
If you administer the server, test the public hostname and the origin separately where your setup permits it. A request may pass through a CDN, load balancer, reverse proxy, and application; a refusal at any layer can prevent the page from loading. A successful ping is not proof that the website’s TCP port or HTTP service accepts connections.
Fix localhost and development-server refusals
Confirm the process and port
Start or restart the application in the correct project and read its startup output for the address and port. The port in the browser URL must match the port where the app listens: a service on port 3000 will not answer a request to port 8080 unless another service is configured there. Also check that the server speaks the requested protocol; an HTTP-only app will not serve HTTPS merely because the URL starts with https://.
Rank #3
- NIGHTHAWK WIFI 6 ROUTER FOR YOUR WHOLE HOME: Delivers fast, reliable WiFi across every room of your apartment or small home for streaming, gaming, video calls, and smart home devices, all running at the same time without slowing each other down.
- WORKS WITH YOUR EXISTING INTERNET SERVICE: Pairs with your existing modem or gateway via ethernet. Compatible with most cable, fiber, DSL, and satellite providers. Some gateways and modem router combos may require bridge mode. No coax needed.
- SET UP AND MANAGE YOUR NETWORK WITH THE NIGHTHAWK APP: Download the free Nighthawk app on iOS or Android for guided setup. Manage WiFi, run speed tests, pause devices, and set up guest networks from anywhere. Active internet required.
- READY FOR THE DEVICES YOU ALREADY OWN: Your phones, laptops, and TVs work right out of the box. WiFi 6 delivers speeds up to 1.8 Gbps across 2.4 GHz and 5 GHz bands. Backward compatible with WiFi 5 and earlier.
- COVERAGE IN EVERY ROOM: Covers up to 1,500 sq. ft. for up to 20 connected devices. Walls, floors, and interference can reduce range. Larger or multi-story homes may benefit from a NETGEAR Orbi mesh WiFi system.
Inspect the listening socket
Use the command for your operating system. Replace 3000 with the port in your URL. Some commands require elevated privileges.
- Linux:
ss -ltnp | grep ':3000'orsudo ss -ltnp. No matching listener usually means the service is stopped, on another port, or using another protocol.127.0.0.1:3000accepts connections only from the same device;0.0.0.0:3000listens on all IPv4 interfaces, subject to firewall rules.[::]:3000is an IPv6 listener; IPv4 behavior depends on system configuration. - macOS:
lsof -nP -iTCP:3000 -sTCP:LISTEN. - Windows PowerShell:
Get-NetTCPConnection -LocalPort 3000 -State Listen. To identify the process, runGet-NetTCPConnection -LocalPort 3000 -State Listen | Select-Object LocalAddress,LocalPort,OwningProcess, thenGet-Process -Id <PID>using the reported process ID.
Test the local HTTP service
Run curl -v http://127.0.0.1:3000 on the server or development machine. Verbose output helps show whether name resolution, the connection, TLS, and HTTP exchange proceed; curl documents -v for diagnosing unclear or failed connections in its tutorial. For a specific public port, try curl -v --connect-timeout 5 http://example.com:8080. The timeout limits the connection phase, which can include DNS and connection handshakes; see curl’s manual.
For IPv4/IPv6 comparison with a public HTTPS hostname, use curl -4 -v https://example.com and curl -6 -v https://example.com. If one works and the other refuses, investigate the corresponding address-family listener, firewall, or DNS record rather than changing unrelated browser settings.
Rank #4
- 𝐅𝐮𝐭𝐮𝐫𝐞-𝐏𝐫𝐨𝐨𝐟 𝐘𝐨𝐮𝐫 𝐇𝐨𝐦𝐞 𝐖𝐢𝐭𝐡 𝐖𝐢-𝐅𝐢 𝟕: Powered by Wi-Fi 7 technology, enjoy faster speeds with Multi-Link Operation, increased reliability with Multi-RUs, and more data capacity with 4K-QAM, delivering enhanced performance for all your devices.
- 𝐁𝐄𝟑𝟔𝟎𝟎 𝐃𝐮𝐚𝐥-𝐁𝐚𝐧𝐝 𝐖𝐢-𝐅𝐢 𝟕 𝐑𝐨𝐮𝐭𝐞𝐫: Delivers up to 2882 Mbps (5 GHz), and 688 Mbps (2.4 GHz) speeds for 4K/8K streaming, AR/VR gaming & more. Dual-band routers do not support 6 GHz. Performance varies by conditions, distance, and obstacles like walls.
- 𝐔𝐧𝐥𝐞𝐚𝐬𝐡 𝐌𝐮𝐥𝐭𝐢-𝐆𝐢𝐠 𝐒𝐩𝐞𝐞𝐝𝐬 𝐰𝐢𝐭𝐡 𝐃𝐮𝐚𝐥 𝟐.𝟓 𝐆𝐛𝐩𝐬 𝐏𝐨𝐫𝐭𝐬 𝐚𝐧𝐝 𝟑×𝟏𝐆𝐛𝐩𝐬 𝐋𝐀𝐍 𝐏𝐨𝐫𝐭𝐬: Maximize Gigabitplus internet with one 2.5G WAN/LAN port, one 2.5 Gbps LAN port, plus three additional 1 Gbps LAN ports. Break the 1G barrier for seamless, high-speed connectivity from the internet to multiple LAN devices for enhanced performance.
- 𝐍𝐞𝐱𝐭-𝐆𝐞𝐧 𝟐.𝟎 𝐆𝐇𝐳 𝐐𝐮𝐚𝐝-𝐂𝐨𝐫𝐞 𝐏𝐫𝐨𝐜𝐞𝐬𝐬𝐨𝐫: Experience power and precision with a state-of-the-art processor that effortlessly manages high throughput. Eliminate lag and enjoy fast connections with minimal latency, even during heavy data transmissions.
- 𝐂𝐨𝐯𝐞𝐫𝐚𝐠𝐞 𝐟𝐨𝐫 𝐄𝐯𝐞𝐫𝐲 𝐂𝐨𝐫𝐧𝐞𝐫 - Covers up to 2,000 sq. ft. for up to 60 devices at a time. 4 internal antennas and beamforming technology focus Wi-Fi signals toward hard-to-reach areas. Seamlessly connect phones, TVs, and gaming consoles.
Reach a development server from another device
localhost always refers to the device making the request. A laptop cannot reach a server on another computer by entering localhost; use the server’s LAN address and the correct port instead. MDN explains the distinction between loopback and local-network addresses: local network access and address spaces.
If the app listens only on 127.0.0.1, another device cannot connect through the LAN address. Binding to 0.0.0.0 can expose the service on all IPv4 interfaces, so do so only when needed and pair it with an appropriately restricted firewall rule. Also check guest Wi-Fi isolation, the server’s current DHCP address, and whether the devices are on networks allowed to communicate.
For Docker, a process listening inside the container is not automatically reachable from the host or LAN. Check docker ps and docker port <container> to verify that the intended port is published. Virtual machines and subsystems may use separate network namespaces or forwarding rules. A reverse proxy can also be listening correctly while its upstream application is stopped or configured on the wrong address.
Best Value
- Dual band router upgrades to 1200 Mbps high speed internet (300mbps for 2.4GHz plus 900Mbps for 5GHz), reducing buffering and ideal for 4K stream
- Full Gigabit Ports - Gigabit Router with 4 Gigabit LAN ports, ideal for any internet plan and allow you to directly connect your wired devices
- Boosted Coverage - Four external antennas equipped with Beamforming technology extend and concentrate the Wi-Fi signals
- MU-MIMO technology - (5GHz band) allows high speeds for multiple devices simultaneously
- Access Point Mode - Supports AP Mode to transform your wired connection into wireless network, an ideal wireless router for home
Windows: test TCP connectivity and network settings
In PowerShell, test the exact host and port:
Test-NetConnection example.com -Port 443
For a local app, use Test-NetConnection 127.0.0.1 -Port 3000. Microsoft documents this command for TCP connectivity testing in its network troubleshooting guidance. TcpTestSucceeded: True means a TCP connection was established; it does not establish that HTTP routing, TLS, authentication, or the application is healthy. A false result points toward the listener, address, port, routing, firewall, proxy, or network policy.
If the problem affects broader connectivity and hostname resolution may be stale, use the Windows DNS and IP renewal commands above. Also check Windows proxy configuration and firewall rules; on a managed computer, let IT handle organization-enforced settings.
macOS and Linux: check listeners, proxies, and logs
On macOS, use lsof -nP -iTCP:3000 -sTCP:LISTEN; on Linux, use ss -ltnp or sudo ss -ltnp. A listener check tells you whether a process is accepting connections on that address and port, not whether the page itself is correct. Use curl -v against the same URL the browser uses, then inspect the application’s service logs if the local connection is refused.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Check active VPN and proxy settings, firewall rules, and any proxy variables used by command-line tools. Chrome normally bypasses proxies for loopback addresses; Chromium documents this behavior and the advanced <-loopback> override in its proxy documentation. Do not change that override casually: it changes how local traffic is handled.
Server and reverse-proxy checks
If you maintain the service, test from the server outward rather than repeatedly changing client settings.
- Confirm the application process is running and inspect its logs for a crash or startup error.
- Confirm the expected port is listening on the intended interface.
- Request the service locally with
curl -v http://127.0.0.1:<PORT>, then test its LAN or public address as appropriate. - Check host firewall rules, router or cloud security-group rules, and network ACLs. Expose a port only when the service is intended to be reachable, with suitable access controls.
- For Nginx, Apache, Caddy, Traefik, or a load balancer, verify the proxy listener, upstream address and port, backend health, proxy-to-upstream firewall path, and error logs.
- Compare IPv4 and IPv6 behavior if users have inconsistent results. A hostname can resolve to both A and AAAA records while only one address family is correctly served.
Use the test results to narrow the layer:
| Test result | Likely area to investigate |
|---|---|
| Local request refuses | Application state, listener, or wrong port |
| Local request works; remote request refuses | Bind address, host firewall, router, cloud rules, or network isolation |
| TCP connects but HTTP returns an error | Application, TLS, authentication, routing, or reverse proxy |
| IPv4 works; IPv6 refuses | Address-family listener, firewall, or DNS/AAAA configuration |
| Origin works; public hostname refuses | DNS destination, CDN, load balancer, edge firewall, or reverse proxy |
Opening a port or binding to all interfaces is not a general fix: it can make a development or internal service reachable beyond the intended device. Restrict access to the required network and confirm the security implications first.
Quick Recap
When to ask for help
- Contact the website owner or service provider if the public site fails from multiple devices and networks, or if you can reproduce a refusal at the public hostname.
- Contact your IT administrator if the issue is limited to a work device, managed network, corporate VPN, or organization-controlled proxy.
- Contact the application or hosting administrator if a local service will not start, a server listener is missing, or a reverse proxy cannot reach its upstream.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
