Live Links Broken on macOS Tahoe + Intel Mac - ECONNRESET Error

Dang, the original ticket Closed 4 days ago! Still occurring - lots of troubleshooting:

Issue Summary

Live Links fails to start on macOS Tahoe running on an Intel Mac. The error occurs immediately when clicking “Enable” on Live Link. This has been confirmed on a completely fresh macOS user profile, ruling out any configuration or third-party software conflicts.

Error Message

Error: read ECONNRESET
at AxiosError.from (/Applications/Local.app/Contents/Resources/app.asar/node_modules/axios/dist/node/axios.cjs:857:14)
at RedirectableRequest.handleRequestError (/Applications/Local.app/Contents/Resources/app.asar/node_modules/axios/dist/node/axios.cjs:3169:25)
at RedirectableRequest.emit (node:events:519:28)
at eventHandlers.<computed> (/Applications/Local.app/Contents/Resources/app.asar/node_modules/follow-redirects/index.js:49:24)
at ClientRequest.emit (node:events:519:28)
at emitErrorEvent (node:_http_client:105:11)
at TLSSocket.socketErrorListener (node:_http_client:518:5)
at TLSSocket.emit (node:events:519:28)
at emitErrorNT (node:internal/streams/destroy:170:8)
at emitErrorCloseNT (node:internal/streams/destroy:129:3)
at Axios.request (/Applications/Local.app/Contents/Resources/app.asar/node_modules/axios/dist/node/axios.cjs:4258:41)
at process.processTicksAndRejections (node:internal/process/task_queues:105:5)

Log output shows:

[error] [main] LiveLinksService: Could not start Live Link Service -- {"sentryEventId":"..."}

System Details

  • Local Version: 9.2.9+6887

  • Operating System: macOS Tahoe 26.2

  • Architecture: Intel x64 (not Apple Silicon)

  • Router Mode: Site Domains

Troubleshooting Completed

All of the following were attempted without success:

  1. Fresh Local install - Completely uninstalled Local (app + all Library files), reinstalled fresh

  2. Fresh macOS user profile - Created brand new macOS user account, installed Local, same error

  3. Sign out/Sign in - Re-authenticated Local account

  4. Network testing:

    • No VPN active

    • No proxy configured

    • No firewall software running

    • Tested on home Wi-Fi and mobile hotspot - same result

    • Disabled “Limit IP Address Tracking” in Network settings

    • Disabled iCloud Private Relay

  5. Standalone ngrok works perfectly - Running ngrok http 80 connects successfully, proving network/tunnel capability is functional

Key Finding

Standalone ngrok (v3.34.0) works without any issues on the same machine. This indicates the network stack and tunnel capability are functional - the issue is specific to Local’s internal tunnel service implementation.

Architecture Log Evidence

From Local’s startup log:

App Architecture         : x64
Built for Intel          : true
Running on Apple Silicon : false

Steps to Reproduce

  1. Install Local 9.2.9 on macOS Tahoe (Intel Mac)

  2. Create or restore any WordPress site

  3. Start the site

  4. Click “Enable” next to Live Link

  5. Error appears immediately

Expected Behavior

Live Link should connect and provide a shareable tunnel URL.

Actual Behavior

Live Link fails immediately with ECONNRESET error.

Workaround

Using standalone ngrok as a workaround:

bash

ngrok http https://sitename.local --host-header=rewrite

This works, but native Live Links functionality would be preferred.

Additional Notes

  • This appears to be specific to the Intel + Tahoe combination

  • The issue occurs even on a completely fresh macOS user profile with no other software installed

  • Local’s tunnel service may be using different endpoints or authentication than standalone ngrok

Thank you for investigating!

Thanks for this report, @KillerDesigner! Please could you share the sentryEventId omitted from your logged output above? It might help us to narrow this down.

I just retested and I’m able to use Live Links on Local 9.2.9 under Tahoe on macOS Intel, but we’re happy to investigate further.

Howdy Nick, sorry for the delay, I was traveling. Here are the logs from a brand new Mac Mini running Sequoia on Mac Silicon. Same issue.

local-lightning-verbose0.log (698.9 KB)

error.log (37.8 KB)

local-details.json (1.5 KB)

Thanks for the extra logs, @KillerDesigner.

I’m still unable to reproduce this on Intel or Apple Silicon with Sequoia, but it could be network-specific since it affects both of your machines.

Have you tried other network connections? If you have, are you running any network filtering software (e.g. Little Snitch, corporate network filters, security software, antivirus) common to both machines?

For Live Links to work, Local needs access to hub.localwp.com. You can see if you have that from your machine by trying these steps from a terminal:

Check connection:

curl -v https://hub.localwp.com/api/

# Response should end with something like:
# Connection #0 to host hub.localwp.com left intact

Check TLS:

openssl s_client -connect hub.localwp.com:443 -servername hub.localwp.com

# Should end with:
# Verify return code: 0 (ok)
# Ctrl-C to exit.

Check DNS:

nslookup hub.localwp.com

# Should give you a 'Server' and 'Address'.

If any of those requests fail, there may be active network filtering or DNS issues from your current network. You would need to ensure Local has access to hub.localwp.com and the other URLs at ‘Allowing Local’ here:

https://localwp.com/help-docs/getting-started/installing-local/#allowing-local

1 Like

Howdy, Nick,

Thanks again for the follow-up. Here’s the output:

Click to expand curl -v https://hub.localwp.com/api/
  • Host hub.localwp.com:443 was resolved.
  • IPv6: 2606:4700:4405::6812:21d6, 2606:4700:440c::ac40:9a2a
  • IPv4: 172.64.154.42, 104.18.33.214
  • Trying [2606:4700:4405::6812:21d6]:443…
  • Connected to hub.localwp.com (2606:4700:4405::6812:21d6) port 443
  • ALPN: curl offers h2,http/1.1
  • (304) (OUT), TLS handshake, Client hello (1):
  • CAfile: /etc/ssl/cert.pem
  • CApath: none
  • (304) (IN), TLS handshake, Server hello (2):
  • (304) (IN), TLS handshake, Unknown (8):
  • (304) (IN), TLS handshake, Certificate (11):
  • (304) (IN), TLS handshake, CERT verify (15):
  • (304) (IN), TLS handshake, Finished (20):
  • (304) (OUT), TLS handshake, Finished (20):
  • SSL connection using TLSv1.3 / AEAD-AES256-GCM-SHA384 / [blank] / UNDEF
  • ALPN: server accepted h2
  • Server certificate:
  • subject: CN=localwp.com
  • start date: Dec 19 01:12:53 2025 GMT
  • expire date: Mar 19 02:12:51 2026 GMT
  • subjectAltName: host “hub.localwp.com” matched cert’s “*.localwp.com”
  • issuer: C=US; O=Google Trust Services; CN=WE1
  • SSL certificate verify ok.
  • using HTTP/2
  • [HTTP/2] [1] OPENED stream for https://hub.localwp.com/api/
  • [HTTP/2] [1] [:method: GET]
  • [HTTP/2] [1] [:scheme: https]
  • [HTTP/2] [1] [:authority: hub.localwp.com]
  • [HTTP/2] [1] [:path: /api/]
  • [HTTP/2] [1] [user-agent: curl/8.7.1]
  • [HTTP/2] [1] [accept: /]

GET /api/ HTTP/2
Host: hub.localwp.com
User-Agent: curl/8.7.1
Accept: /


Certificate chain
0 s:CN=localwp.com
i:C=US, O=Google Trust Services, CN=WE1
a:PKEY: EC, (prime256v1); sigalg: ecdsa-with-SHA256
v:NotBefore: Dec 19 01:12:53 2025 GMT; NotAfter: Mar 19 02:12:51 2026 GMT
1 s:C=US, O=Google Trust Services, CN=WE1
i:C=US, O=Google Trust Services LLC, CN=GTS Root R4
a:PKEY: EC, (prime256v1); sigalg: ecdsa-with-SHA384
v:NotBefore: Dec 13 09:00:00 2023 GMT; NotAfter: Feb 20 14:00:00 2029 GMT
2 s:C=US, O=Google Trust Services LLC, CN=GTS Root R4
i:C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
a:PKEY: EC, (secp384r1); sigalg: sha256WithRSAEncryption
v:NotBefore: Nov 15 03:43:21 2023 GMT; NotAfter: Jan 28 00:00:42 2028 GMT

Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----






issuer=C=US, O=Google Trust Services, CN=WE1

No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: ecdsa_secp256r1_sha256
Negotiated TLS1.3 group: X25519MLKEM768

SSL handshake has read 3912 bytes and written 1626 bytes
Verification: OK

New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Protocol: TLSv1.3
Server public key is 256 bit
This TLS version forbids renegotiation.
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)

Post-Handshake New Session Ticket arrived:
SSL-Session:
Protocol : TLSv1.3
Cipher : TLS_AES_256_GCM_SHA384
Session-ID: 8B359EB33B388DE398113FD14B133971F18D32A0AF2F07BC5174B3A5C325F7CE
Session-ID-ctx:
Resumption PSK: 490446393E2D84DF77771A3C2CA9F8D1110FDFB76B7745F8717EDF180FC5709B77E8937B9058CBE8F3A3B7A64D8D600C
PSK identity: None
PSK identity hint: None
SRP username: None
TLS session ticket lifetime hint: 64800 (seconds)
TLS session ticket:
0000 - 26 f3 89 58 47 f7 bb 9d-06 c4 a3 87 85 d3 e5 de &..XG…
0010 - 9e 6c 48 54 b4 77 29 f6-97 d3 d8 e1 a7 0a 42 6f .lHT.w)…Bo
0020 - 68 6c be d7 e1 f2 14 b7-57 e9 e4 e5 18 1c 2a 82 hl…W…*.
0030 - 35 f2 ec d4 8a 37 98 9d-02 b5 d3 a9 b0 84 b5 58 5…7…X
0040 - 3a 91 1d c5 13 4f c8 63-47 be 1f 7d e5 5b bd 68 :…O.cG..}.[.h
0050 - ae 2c d1 ef f3 95 8e 98-aa 72 01 ba d5 29 f9 2d .,…r…).-
0060 - bd 57 d9 92 b1 b4 62 4b-38 91 ee 52 5f 6a 22 39 .W…bK8..R_j"9
0070 - e3 00 8b 40 38 ad 9e 27-29 6f e4 12 bd f5 e4 01 …@8..')o…
0080 - ca 58 5e 5c 71 58 9e 11-8d cb ab 31 42 25 ed d4 .X^\qX…1B%..
0090 - 55 d7 00 86 1e 99 f5 a6-1c 58 88 8a 90 94 d9 cc U…X…
00a0 - e7 02 51 bc 57 cc a0 e7-3b 49 b3 5d 47 49 9a c5 ..Q.W…;I.]GI..
00b0 - 3f bd ca 5c 19 9f 10 f3-d5 ac ef 4b c3 e6 b2 ce ?..…K…
00c0 - a2 5a a1 12 94 66 42 a0-ef 1d 20 79 4d e5 8e 67 .Z…fB… yM..g

Start Time: 1769445199
Timeout   : 7200 (sec)
Verify return code: 0 (ok)
Extended master secret: no
Max Early Data: 14336

read R BLOCK

Post-Handshake New Session Ticket arrived:
SSL-Session:
Protocol : TLSv1.3
Cipher : TLS_AES_256_GCM_SHA384
Session-ID: D2A3B494F055EAB1525AD10E65444896546B222712308D3497C752395EC482E2
Session-ID-ctx:
Resumption PSK: 010DEACD9675AA8ABEF89BB21467BAC2C2448764E948ED07A841C093402B1AD4201F306D2A7FC041B2E72B8514C55DE1
PSK identity: None
PSK identity hint: None
SRP username: None
TLS session ticket lifetime hint: 64800 (seconds)
TLS session ticket:
0000 - 26 f3 89 58 47 f7 bb 9d-06 c4 a3 87 85 d3 e5 de &..XG…
0010 - d6 c9 27 58 86 b0 31 64-77 11 28 57 ae 49 fe 8f ..‘X..1dw.(W.I..
0020 - 1d 46 8f 2b a2 99 d3 c9-1b d9 e7 c3 94 83 e3 85 .F.+…
0030 - 82 69 67 37 e5 b6 c6 a6-05 12 3d e3 d0 6a f5 92 .ig7…=..j..
0040 - c7 3c 59 f0 e8 29 b4 fb-a9 93 0f 89 2e 7a 6d ce .<Y..)…zm.
0050 - 11 80 c8 ae 52 69 82 f2-4a d0 c8 aa 17 21 ba 20 …Ri..J…!.
0060 - f1 f1 7f 6c 85 da cb 99-74 ed 3f 1c 28 f3 75 67 …l…t.?.(.ug
0070 - 69 0f 3a 5e d8 48 48 67-95 82 e5 1f 27 24 2d be i.:^.HHg…’$-.
0080 - 51 a9 d5 52 1f 99 8d eb-f9 a7 75 44 93 fc f4 ac Q..R…uD…
0090 - 18 7f 9d 74 c2 fc 39 12-5a 1c 3e 76 88 62 fa 68 …t..9.Z.>v.b.h
00a0 - d3 4d bd d6 a3 0e e1 40-b2 f9 0c 8d 41 d9 5f 2e .M…@…A._.
00b0 - e9 0e be 2b 24 81 05 7d-ef dc 09 20 3a 03 ff a7 …+$..}… :…
00c0 - 75 ba 1e ef c8 04 7a 92-fe 0e ee e4 0e 5d e3 d7 u…z…]..

Start Time: 1769445199
Timeout   : 7200 (sec)
Verify return code: 0 (ok)
Extended master secret: no
Max Early Data: 14336

read R BLOCK
closed

nslookup hub.localwp.com
Server: 2600:1700:659:4410::1
Address: 2600:1700:659:4410::1#53

Non-authoritative answer:
Name: hub.localwp.com
Address: 104.18.33.214
Name: hub.localwp.com
Address: 172.64.154.42

out of frustration, since I can’t access anything I am working on, I have uninstalled LocalWP completely at this point. If there’s a “complete uninstall” script I can use to install again and log everything, that might work.

Steve

What’s weird is this was all working seemingly prior to upgrading to Tahoe. However I have also started working with a bunch of new development tools, particularly Docker Desktop and some others. And maybe they’re interfering, but I ran scripts against those ports looking for any conflicts but couldn’t find anything.

Thanks for the output, and sorry for your experience after upgrading to Tahoe, @KillerDesigner.

Your DNS/SSL/connection logs don’t appear to show any issues. I still can’t reproduce Live Links failure under Tahoe on any Macs I have access to (I also run Docker Desktop, but likely not with the exact services as you).

Port binding conflicts or local DNS resolution related to your new tools could affect Live Links. Your network connection may also play a role in traffic routing to Local’s Live Links servers.

If you’d like to continue debugging, you could try running Local from another network or with all other apps that might share ports closed. If you need them, we also have instructions to uninstall Local fully. (I recommend backing up your sites folder first if you have not already done so, though.)

1 Like