same thing happens in italy
Tell HN: Docker pull fails in Spain due to football Cloudflare block
231–240 of 444 posts
Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block
#232They block the whole of Cloudflare R2, I believe the Docker hub is just (heh) a collateral. When the La Liga match starts, everything that's proxied via CF (including zero access reverse tunnels) stops working. There's even a website made for checking if the match is on: https://hayahora.futbol/ You can check if your host is affected: https://hayahora.futbol/#comprobador&domain=docker-images-pr...
Ah man, that shader in the background is like a rite of passage for people including a shader on their website. https://www.shadertoy.com/view/lscczl
Ah the irony, I'm blocked from viewing that page by Cloudflare
Performing security verification
This website uses a security service to protect against malicious bots. This page is displayed while the website verifies you are not a bot. Incompatible browser extension or network configuration
Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block
#233What's the current state of the art for VPN'ing through deep packet inspection firewalls? I have imagined building something around TLS and Websockets that connects to a popular cloud provider which is "too big to block". Of course, if they'll block Cloudflare, or all connections outside of the country, maybe _nothing_ is too big to block. I remember some solutions to this in the 2010s, like obfsproxy and shadowsocks, but are there any newer or better options?
Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block
#234As a Spaniard, this also happens to me. You can either use a VPN or just switch DNS servers to one that doesn’t have anycast nodes in Spain.
Cloudflare’s authoritative DNS uses EDNS Client Subnet (ECS) to return different IP pools based on where the query originates. Spanish resolvers get IPs from a range that La Liga blocks. If your recursive resolver is physically outside Spain (or you use DoH/DoT to tunnel to one), Cloudflare returns a different, unblocked pool.
AdGuard DNS works well for this.
Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block
#235Interesting alternative. Cloudflare (market cap $58B) buys La liga (market value $5 billion), drops suit.
I'm not sure where that number comes from but I don't think it's right, and I don't think that's how La Liga is structured anyway. It's governed by an association of all of the teams in the top two flights of spanish football.
Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block
#236Why are you working instead of watching the match?
That's what crossed my mind too: It's like a nationally-mandated break to watch football.
Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block
#237Earlier quoted context omitted.
> It’s precisely because CloudFlare isn’t responding like other CDNs to reasonable demands to cut off pirate origin sites that this mess exists. If they reacted quickly to remove configurations that are obviously facilitating copyright infringement, Spain wouldn’t resort to full scale ASN blocking. Apropos of anything else, CF is (reasonably) requiring a court order to remove offending material rather than just "well…
At least the DMCA in the U.S. has guardrails: not just anyone can send a takedown demand for everything. The requester has identify the works and declare under penalty of perjury that they are operating on the behalf of the owner. I imagine the equivalent EU law has similar requirements. CloudFlare uses legal chicanery to try to subvert the DMCA by claiming that because they’re not the origin server, they’re not subj…
> At least the DMCA in the U.S. has guardrails: not just anyone can send a takedown demand for everything. The requester has identify the works and declare under penalty of perjury that they are operating on the behalf of the owner.
You'd think so, but no.
DMCA came into effect 28 years ago. All those decades, all those billions of takedowns, and you don't even need the fingers of one hand to count those who've been hit with perjury for a false takedown request, because the number is ... zero.
Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block
#238I'm in Spain as well and it sucks a lot. What I do now is I go thorough Cloudflare 1.1.1.1 VPN (set up on my router). Fixes the issue and there is practically no latency or bandwidth impact.
You mean 1.1.1.1. DNS? Or do they also serve a VPN through that IP?
Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block
#239Earlier quoted context omitted.
Your last paragraph: it is sad. But we had successful global networks before the Internet (the PSTN, telegraph) and we'll certainly have global networks after this at some point in human history. Perhaps in the the time between the Internet and what's next, the world will become a bit more mature about a few things.
> But we had successful global networks before the Internet (the PSTN, telegraph) These were ripe with espionage, wiretapping and sabotage. Access to it used to be highly restricted as well, up until the 90s for example you were only allowed to connect government-licensed modems to the German PSTN directly.
Surely this was simply the nature of Deutsche Bundespost / Deutsche Telekom? Like, of course you had to use hardware they had approved to connect to their network.
This was the same in many places. The cost of hardware and connection time limited connections, and no one had cryptography except the government and ultra nerds.
Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block
#240I don't even like televised sport but this makes me want to figure out how to pirate it at scale