All Products
Search
Document Center

Enterprise Distributed Application Service:FAQ about on-premises and cloud connection

Last Updated:Mar 11, 2026

Why is my on-premises and cloud connection request rejected with a 403 error?

Symptom

When you initiate an on-premises and cloud connection request, the service registry rejects the request and returns the following error:

code:403,msg: access denied

Cause

The service registry uses timestamps to validate service registration requests. If the clock on your on-premises system is out of sync with the cloud, the service registry rejects the connection.

Resolution

Synchronize your on-premises system clock with a reliable time source, such as an NTP server, and retry the connection.

Note

Alibaba Cloud Toolkit V2020.9.1 and later include a quick diagnosis feature that detects issues such as etrans channel startup exceptions and service connection failures. Upgrade to V2020.9.1 or later for built-in diagnostics.

Can on-premises applications connect to cloud components?

Yes, but only with Alibaba Cloud Toolkit V2020.9.1 or later. Requests from on-premises applications are forwarded through a jump server to the following cloud components:

  • Spring Cloud Gateway

  • Databases

  • Redis

  • Message components

Upgrade Alibaba Cloud Toolkit to V2020.9.1 or later to use this feature.