Tell HN: Docker pull fails in Spain due to football Cloudflare block • Hacker News Board

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#361

Post by megous » Mon, Apr 13, 2026, 10:47 AM UTC

emptysongglass wrote: post #183

embedding-shape wrote: post #79

Earlier quoted context omitted.

I've been filing complaints since a year ago, told others to do the same too, nothing happens. There been moments I've meant to deploy fixes to issues but I cannot, because some tooling goes offline. I've claimed financial loss, claimed sanity loss and everything in-between, but I'm afraid unless something reaches the European/EU courts, Spain will continue to be in the pocket of the La Liga owners. Straight up fucki…

Because the EU as a whole is quite happy to censor and generally wield the same tricks as "non-Western" countries in their desires to combat misinformation (however our EU bureaucrats define it), child abuse materials (see Chat Control that thing is not going to go away), and hatred (oh boy). We've never guaranteed the right to free speech and because we haven't it's a slippery slope all the way back down to the furn…

Not sure why you get downvoted. EU censors quite a bit. I can't read about 10 Telegram channels that I could access just 3 years ago, and the list is growing. All due to "vioalted laws of [my country]". (said near-east related channels have nothing to do with my country, government just doesn't want me to read them)

Some people deemed "russian assets" are not just censored, but stripped of ability to leave EU and prevented from being able to live in EU at the same time by financial sanctions, etc. Of course this doesn't happen to actual politicians in power, for whatever reason those never get sanctioned by EC, despite doing more "damage" than random blabberheads on twitter.

It's a mess.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#362

Post by dariosalvi78 » Mon, Apr 13, 2026, 10:55 AM UTC

micw wrote: post #299

utrack wrote: post #4

They block the whole of Cloudflare R2, I believe the Docker hub is just (heh) a collateral. When the La Liga match starts, everything that's proxied via CF (including zero access reverse tunnels) stops working. There's even a website made for checking if the match is on: https://hayahora.futbol/ You can check if your host is affected: https://hayahora.futbol/#comprobador&domain=docker-images-pr...

Who exactly is blocking and on what legal base? If it's Spanish ISPs and they are massively over blocking, why are there no legal actions against them? (E.g. for not fulfilling their contracts)

it's institutional corruption at all levels, legislative, executive and judicial. A systemic failure that favour abnormous private profits over basic rights of the citizens.

The effort required to change the situation is massive.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#363

Post by isodev » Mon, Apr 13, 2026, 10:55 AM UTC

Very good example as to why using a single, centralised proxy globally by all services is a bad idea. Docker would never have a reason to block anything if they were simply running their own.

For everyone else, small and big, this is the weekly reminder to not use Cloudflare for user-facing access to anything.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#364

Post by ErneX » Mon, Apr 13, 2026, 11:08 AM UTC

spwa4 wrote: post #312

Ikatza wrote: post #242

Earlier quoted context omitted.

Just so everyone here has the full picture: the source linked — Assemblea Nacional Catalana — is not a human rights watchdog, an international observer, or a journalistic outlet. It is the main pro-independence criminal activist organization in Catalonia. Citing them as evidence of Spanish human rights abuses is a bit like citing the murderer's wife as an impartial witness. For context, Spain is a full constitutional…

Or to put it another way: Catalunya (Barcelona and surroundings) is one of 3 Spanish regions that want to break away from Spain, not counting overseas territories. And yes, the population really wants this: there was a referendum and the outcome was: 92% want out of Spain. https://en.wikipedia.org/wiki/2017_Catalan_independence_refe... (why? Let's be honest: Catalunya would benefit enormously from independence, but w…

You forgot to mention that some of the people behind the catalonian independence movement met with Russians who even offered military support if they went ahead with a proclamation of independency. I think we should all move on from that bizarre situation.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#365

Post by pajamasam » Mon, Apr 13, 2026, 11:13 AM UTC

isodev wrote: post #363

Very good example as to why using a single, centralised proxy globally by all services is a bad idea. Docker would never have a reason to block anything if they were simply running their own. For everyone else, small and big, this is the weekly reminder to not use Cloudflare for user-facing access to anything.

There are multiple good reasons to use a CDN though. What’s your suggestion for an alternative?

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#366

Post by teitoklien » Mon, Apr 13, 2026, 11:22 AM UTC

madbo1 wrote: post #308

Reading this from India, where stuff like this is pretty much Tuesday business. But that’s not the problem; the problem is precisely the one hour of your life spent trying to figure out whether the issue is your DNS, your VPN, your configuration, or your programming. “The government in the country I’m accessing this from just decided to shut down my IP for the next two hours” rarely crosses your mind. India has consi…

[flagged]

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#367

Post by chaz6 » Mon, Apr 13, 2026, 11:30 AM UTC

egeres wrote: post #348

I wasn't able to pull some images and I lost 1h trying to diagnose network problems in my setup, but it didn't occur to me that "la liga" was the root cause . My workaround was to add "registry-mirrors": [" https://mirror.gcr.io "] in my /etc/docker/daemon.json

This is the correct answer.

Something that confused me for a while was the path "docker.io" used for pulling containers. There is not actually a container registry at "docker.io" - rather docker and podman are hard coded to convert it to either "registry-1.docker.io" or "index.docker.io".

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#368

Post by fc417fc802 » Mon, Apr 13, 2026, 11:42 AM UTC

mschuster91 wrote: post #352

fc417fc802 wrote: post #248

Earlier quoted context omitted.

> It's driving up the cost and expenses. That's an interesting point. Are their margins so slim that they can't afford less than ~$50 per domain? I'm not familiar with their revenue model. This is the sort of thing that could be done via the legislature if Spain were serious and playing by the rules. They could require ISPs to do DNS filtering based on domain age during matches. If they really wanted to do service le…

> Are their margins so slim that they can't afford less than ~$50 per domain? It's not (just) about driving up the financial cost, that works out decently to combat "normal" spam. The thing is, it drives up the organizational effort - you need to acquire and maintain a constant fresh stream of fake identities, payment credentials and the likes. > Let's set aside for a moment that I think this suggestion is completely…

> you need to acquire and maintain a constant fresh stream of fake identities, payment credentials and the likes.

Domains aren't free to begin with so I'm not sure what your point is. You claimed a small hike would price them out so I asked about their revenue model.

> And yes, Cloudflare could go and say "we block everything looking like m3u8 HLS, DASH or other forms of video streaming for young accounts".

Yes, they could start doing DPI and arbitrarily censoring things similar to the Chinese. As I previously stated your position is an affront to free society. You ought to be ashamed to advocate such viewpoints.

Also it would not go as smoothly as you seem to think. Without access to the plaintext stream they would be guessing using heuristics and there would be at least some false positives.

> One man's freedom ends where another man's freedom begins

A vacuous rebuttal seeing as violating IP law doesn't infringe on anyone else's freedoms. By the same logic an impressum for printed works could be justified on the basis of people who publish "harmful" viewpoints such as those that might lead to social discord.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#369

Post by goodcanadian » Mon, Apr 13, 2026, 11:50 AM UTC

pxc wrote: post #56

danirod wrote: post #30

Heh, lucky you, at least you get a message. My ISP just drops traffic to the affected IPs. No ping, no traceroute, just a spinner in the browser until it says "page not found". Every response and comment from LaLiga, the football organization responsible for this, has been so far that this is a minor issue that only affects a few bunch of nerds who talk about "docker images" or "github repositories" or "whatever that…

> Heh, lucky you, at least you get a message. My ISP just drops traffic to the affected IPs. No ping, no traceroute, just a spinner in the browser until it says "page not found". This is generally how the GFW works in China. Instead of an overbearing nanny like a school or corporation's DNS blocker, you're left with a sense that you're on a version of the Internet that is just intermittently and somewhat mysteriously…

This is generally how the GFW works in China. Instead of an overbearing nanny like a school or corporation's DNS blocker, you're left with a sense that you're on a version of the Internet that is just intermittently and somewhat mysteriously broken.

Oh boy, an excuse to share my favourite great firewall story on a visit to China. Keep in mind, this is 15 years old, so probably doesn't represent the current state of affairs. At the time, my daily news reading habit had me checking BBC and CBC (Canadian Broadcasting Corporation). The BBC site seemed to be working fine, but whenever I clicked on an article on CBC, it was blocked. A few minutes later, I went to show my wife that CBC articles were blocked, and I clicked on the same one again, and it loaded. I clicked on another: blocked. Tried it again after a few minutes and it loaded. Someone was screening the articles in real time for me. When I was done reading, I clicked on several of the weirdest headlines I could find, and after a few minutes, everything was blocked again including ones that had previously worked.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#370

Post by eazel7 » Mon, Apr 13, 2026, 11:59 AM UTC

nikanj wrote: post #329

micw wrote: post #299

Earlier quoted context omitted.

Who exactly is blocking and on what legal base? If it's Spanish ISPs and they are massively over blocking, why are there no legal actions against them? (E.g. for not fulfilling their contracts)

On the one hand, you have money and famous footballers. On the other hand, you have a bunch of nerds whining about the internet being broken. The average voter (and politician) is out watching the soccer match, and doesn't care about the internet.

then I think we should move all possible services to cloudflare maybe when nothing works for them they start to care