{"action":"created","issue":{"url":"https://api.github.com/repos/docker/hub-feedback/issues/369","labels_url":"https://api.github.com/repos/docker/hub-feedback/issues/369/labels{/name}","comments_url":"https://api.github.com/repos/docker/hub-feedback/issues/369/comments","events_url":"https://api.github.com/repos/docker/hub-feedback/issues/369/events","html_url":"https://github.com/docker/hub-feedback/issues/369","id":108658795,"number":369,"title":"Unable to pull docker images in Iran","user":{"login":"siavashs","id":113189,"avatar_url":"https://avatars.githubusercontent.com/u/113189?v=3","gravatar_id":"","url":"https://api.github.com/users/siavashs","html_url":"https://github.com/siavashs","followers_url":"https://api.github.com/users/siavashs/followers","following_url":"https://api.github.com/users/siavashs/following{/other_user}","gists_url":"https://api.github.com/users/siavashs/gists{/gist_id}","starred_url":"https://api.github.com/users/siavashs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/siavashs/subscriptions","organizations_url":"https://api.github.com/users/siavashs/orgs","repos_url":"https://api.github.com/users/siavashs/repos","events_url":"https://api.github.com/users/siavashs/events{/privacy}","received_events_url":"https://api.github.com/users/siavashs/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":9,"created_at":"2015-09-28T13:32:42Z","updated_at":"2015-10-05T14:14:07Z","closed_at":null,"body":"I recently noticed that it's not possible to pull any docker images in Iran.\r\n\r\nThis is the output from my Mac, using latest docker toolbox:\r\n```\r\n$ docker pull hello-world\r\nUsing default tag: latest\r\nlatest: Pulling from library/hello-world\r\n\r\n535020c3e8ad: Pulling fs layer\r\naf340544ed62: Pulling fs layer\r\naf340544ed62: Layer already being pulled by another client. Waiting.\r\n```\r\nThis message is confusing, but after trying to pull the image on our production server which has been running docker for some time, I got a better error message:\r\n```\r\n# docker pull hello-world\r\nPulling repository hello-world\r\naf340544ed62: Error pulling image (latest) from hello-world, Server error: Status 403 while fetching image layer (535020c3e8add9d6bb06e5ac15a261e73d9b213d62fb2c14d752b8e189b2b912)\r\nc15a261e73d9b213d62fb2c14d752b8e189b2b912) s\r\nFATA[0009] Error pulling image (latest) from hello-world, Server error: Status 403 while fetching image layer (535020c3e8add9d6bb06e5ac15a261e73d9b213d62fb2c14d752b8e189b2b912)\r\n```\r\nAt first I thought that the government telecom has made a mistake and filtered the repository.\r\nBut after some digging around I found out that CloudFront has blocked our IP addresses:\r\n```\r\n# curl -i --location-trusted -I -X GET -H \"Authorization: Token signature=269b05c5abaa55f6bea92fee7ee0f47cea6d7e43,repository=\"library/hello-world\",access=read\" https://registry-1.docker.io/v1/images/af340544ed62de0680f441c71fa1a80cb084678fed42bae393e543faea3a572c/layer\r\nHTTP/1.1 302 FOUND\r\nServer: gunicorn/18.0\r\nDate: Mon, 28 Sep 2015 13:01:52 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 999\r\nLocation: https://dseasb33srnrn.cloudfront.net/registry-v2/docker/registry/v2/blobs/sha256/a3/a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4/data?Expires=1443445372&Signature=jGR026naoxUshm~NlXcWDqXv-ugJplaHCu8ur6bR0oQ5UVbq3cF4ociQc26GbyG-b3Wk~eqq~qSgSVmwt~Q-WJI2pak~UEsH1FiVQlXrDi1h5jW32PpqXbx5P563LQzo4TaqpyVv0Q492aG0zGvvy07iNEjRHkK8cxvbAR9qwS0_&Key-Pair-Id=APKAJECH5M7VWIS5YZ6Q\r\nX-Docker-Registry-Version: 0.8.3\r\nX-Docker-Registry-Config: prod\r\nStrict-Transport-Security: max-age=31536000\r\n\r\nHTTP/1.1 403 Forbidden\r\nServer: CloudFront\r\nDate: Mon, 28 Sep 2015 13:01:53 GMT\r\nContent-Type: text/html\r\nContent-Length: 622\r\nConnection: keep-alive\r\nX-Cache: Error from cloudfront\r\nVia: 1.1 9cb7069f75bd5e93aca96cf4ab157188.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Id: NYwHUVgcOIk_UBBxE6sHgR4gt1tcPJMmeWpBTei57RB2fLeDMCAvvQ==\r\n```\r\nI tested from 3 different data centers and all are blocked!\r\nDid you guys enable the CloudFront's Geo Restrictions or intentionally blocked Iranian users?"},"comment":{"url":"https://api.github.com/repos/docker/hub-feedback/issues/comments/145542179","html_url":"https://github.com/docker/hub-feedback/issues/369#issuecomment-145542179","issue_url":"https://api.github.com/repos/docker/hub-feedback/issues/369","id":145542179,"user":{"login":"behnam-marandi","id":1925893,"avatar_url":"https://avatars.githubusercontent.com/u/1925893?v=3","gravatar_id":"","url":"https://api.github.com/users/behnam-marandi","html_url":"https://github.com/behnam-marandi","followers_url":"https://api.github.com/users/behnam-marandi/followers","following_url":"https://api.github.com/users/behnam-marandi/following{/other_user}","gists_url":"https://api.github.com/users/behnam-marandi/gists{/gist_id}","starred_url":"https://api.github.com/users/behnam-marandi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/behnam-marandi/subscriptions","organizations_url":"https://api.github.com/users/behnam-marandi/orgs","repos_url":"https://api.github.com/users/behnam-marandi/repos","events_url":"https://api.github.com/users/behnam-marandi/events{/privacy}","received_events_url":"https://api.github.com/users/behnam-marandi/received_events","type":"User","site_admin":false},"created_at":"2015-10-05T14:14:07Z","updated_at":"2015-10-05T14:14:07Z","body":"Please reconsider this decision. It is not fair."}}