Live data from Hacker News

Tell HN: Docker pull fails in Spain due to football Cloudflare block

news.ycombinator.com

31–40 of 444 posts

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#31
post #19
post #4

They block the whole of Cloudflare R2, I believe the Docker hub is just (heh) a collateral. When the La Liga match starts, everything that's proxied via CF (including zero access reverse tunnels) stops working. There's even a website made for checking if the match is on: https://hayahora.futbol/ You can check if your host is affected: https://hayahora.futbol/#comprobador&domain=docker-images-pr...

Why do they do that? Sorry, I don't speak Spanish.

to """"""""""prevent piracy""""""""""

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#32
post #19
post #4

They block the whole of Cloudflare R2, I believe the Docker hub is just (heh) a collateral. When the La Liga match starts, everything that's proxied via CF (including zero access reverse tunnels) stops working. There's even a website made for checking if the match is on: https://hayahora.futbol/ You can check if your host is affected: https://hayahora.futbol/#comprobador&domain=docker-images-pr...

Why do they do that? Sorry, I don't speak Spanish.

Here's a good English-language article about it, with a timeline: https://daniel.es/blog/cloudflare-vs-la-liga/

Looks like same old regulatory capture.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#33

Earlier quoted context omitted.

They are not "planning" to block VPNs. A technologically illiterate judge has ordered it, but there are no plans nor mechanisms to enforce it.

If they can block IPs of cloudflare what extra mechanisms would be needed to block VPN IPs?

The only viable way to even get most of them is to shut down internet access entirely. It's not a realistic solution, unlike blocking a few well known IP ranges belonging to a large corp like Cloudflare.

And even if you managed to get them all beforehand, some VPN providers will adapt and keep some servers in reserve, putting them online just as you managed to block the previous ones. Getting around internet censorship is a large chunk of their business, and some are really good at it.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#34
post #17

CF could just sue LaLiga and the judge as interrupting and intercepting telecomms it's a really serious crime in Spain. Call the AEPD too because of consumers' right against both ISP and LaLiga's snooping. Another huge fine. This is not an issue under the civil code (civilian issues), but something to be dealt under penal (criminal) code. In Spanish https://www.fiscal.es/memorias/memoria2020/FISCALIA_SITE/rec... Oh,…

Looks like they already tried to appeal the block, and lost:

https://x.com/jaumepons/status/1904906677335245294

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#35
post #17

CF could just sue LaLiga and the judge as interrupting and intercepting telecomms it's a really serious crime in Spain. Call the AEPD too because of consumers' right against both ISP and LaLiga's snooping. Another huge fine. This is not an issue under the civil code (civilian issues), but something to be dealt under penal (criminal) code. In Spanish https://www.fiscal.es/memorias/memoria2020/FISCALIA_SITE/rec... Oh,…

I think they are doing it already.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#36
post #2

Time to use a VPN in your docker pipelines ;) Or run your systems outside of Spain. Or can this be avoided by using an alternate DNS?

They are planning to also block VPN providers during football matches, see https://www.techradar.com/vpn/vpn-privacy-security/la-liga-w...

When talking about VPNs, it doesn't have to mean "third party VPN". You can host your own on any VPN service outside of Spain.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#37
post #5

Off topic but I wonder when Cloudflare is going to launch their own Docker registry as a product.

Well, Cloudflare does not launch anything. They acquire to build products. Look into all their recent product launches. They acquired a relatively small company and converted the founding team to a product team.

So, if you want them to build stuff, ask yourself, are there any "Docker Registry" startups out there. If jsdelivr/globalping is not keeping you busy enough... there is an idea

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#38
post #19
post #4

They block the whole of Cloudflare R2, I believe the Docker hub is just (heh) a collateral. When the La Liga match starts, everything that's proxied via CF (including zero access reverse tunnels) stops working. There's even a website made for checking if the match is on: https://hayahora.futbol/ You can check if your host is affected: https://hayahora.futbol/#comprobador&domain=docker-images-pr...

Why do they do that? Sorry, I don't speak Spanish.

Because LaLiga and football in general is what is governing Spain really.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#39
This is a great example of why blanket IP blocking is such a terrible enforcement mechanism. Cloudflare hosts hundreds of thousands of services behind shared IP ranges — blocking one IP to stop a piracy stream takes out everything else on that IP, including Docker registries, API endpoints, and CDNs that have nothing to do with football.

  The real fix on your end until Spain sorts this out: set up a pull-through registry cache (e.g. registry:2 with proxy.remoteurl) on a VPS outside Spain, and point your Docker daemon's mirror config at it. Your
  GitLab runner pulls from the cache, the cache pulls from Docker Hub via a non-blocked IP. Also insulates you from Docker Hub rate limits.

  But yeah, the fact that a court order about football streaming can break docker pull for an entire country is genuinely absurd.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#40
post #30

Heh, lucky you, at least you get a message. My ISP just drops traffic to the affected IPs. No ping, no traceroute, just a spinner in the browser until it says "page not found". Every response and comment from LaLiga, the football organization responsible for this, has been so far that this is a minor issue that only affects a few bunch of nerds who talk about "docker images" or "github repositories" or "whatever that…

All people affected should file a complaint with your ISP and with Oficina de Atención al Usuario de Telecomunicaciones claiming financial loss for arbitrary service censorship.
Post reply on HN