News for hackers. Stuff that matters.

A comment on Docker limits unauthenticated pulls to 10/HR/IP from Docker Hub, from March 1. Parent comment

Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by orochimaaru on Friday February 21, 2025 @09:57AM (#43128152)
They should have provided more notice. Your case is simply prioritizing work that you would have wanted to complete anyway. As a paying customer you could check if your unauthenticated requests can go via specific outbound IP addresses that they can then whitelist? I’m not sure but they may be inclined to provide exceptions for paying customers - hopefully.
[ Parent | on HN ]
Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by rjst01 on Friday February 21, 2025 @10:08AM (#43128298)
> Your case is simply prioritizing work that you would have wanted to complete anyway

It's busy-work that provides no business benefit, but-for our supplier's problems.

> specific outbound IP addresses that they can then whitelist

And then we have an on-going burden of making sure the list is kept up to date. Too risky, IMO.

[ Parent | on HN ]
Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by troutwine on Friday February 21, 2025 @10:22AM (#43128471)
> It's busy-work that provides no business benefit, but-for our supplier's problems.

I dunno, if I were paying for a particular quality-of-service I'd want my requests authenticated so I can make claims if that QoS is breached. Relying on public pulls negates that.

Making sure you can hold your suppliers to contract terms is basic due diligence.

[ Parent | on HN ]
Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by rjst01 on Friday February 21, 2025 @10:31AM (#43128591)
It is a trade-off. For many services I would absolutely agree with you, but for hosting public open-source binaries, well, that really should just work, and there's value in keeping our infrastructure simpler.
[ Parent | on HN ]
Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by cpuguy83 on Friday February 21, 2025 @11:38AM (#43129594)
This was announced last year.
[ Parent | on HN ]
Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by icehawk on Friday February 21, 2025 @02:37PM (#43131933)
This sounds like its only talking about authenticated pulls:

> We’re introducing image pull and storage limits for Docker Hub. This will impact less than 3% of accounts, the highest commercial consumers. For many of our Docker Team and Docker Business customers with Service Accounts, the new higher image pull limits will eliminate previously incurred fees.

[ Parent | on HN ]
Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by cpuguy83 on Friday February 21, 2025 @03:18PM (#43132427)
Go look at the wayback for the exact page the OP is linking to.
[ Parent | on HN ]