News for hackers. Stuff that matters.

A comment on Docker limits unauthenticated pulls to 10/HR/IP from Docker Hub, from March 1. Parent comment

Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by josteink on Friday February 21, 2025 @09:41AM (#43127966)
> If we had instead simply mirrored everything into a registry at a big cloud provider

You would have had to authenticate to access that repo as well.

[ Parent | on HN ]
Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by rjst01 on Friday February 21, 2025 @10:03AM (#43128238)
Amazon ECR for instance provides the option to host a public registry.
[ Parent | on HN ]
Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by wiether on Friday February 21, 2025 @12:26PM (#43130297)
> Data transferred out from public repositories is limited by source IP when an AWS account is not used.

https://aws.amazon.com/ecr/pricing/?nc1=h_ls

> For unauthenticated customers, Amazon ECR Public supports up to 500GB of data per month. https://docs.aws.amazon.com/AmazonECR/latest/public/public-s...

I don't see how it's better.

[ Parent | on HN ]
Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by lowercased on Friday February 21, 2025 @09:56AM (#43128141)
Wouldn't they get a choice as to what type of authentication they want to use then? I'd assume they could limit access in multiple ways, vs just the dockerhub way.
[ Parent | on HN ]
Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by a022311 on Friday February 21, 2025 @11:06AM (#43129112)
`mirror.gcr.io` works fine for many popular images on Docker Hub.
[ Parent | on HN ]