Top
Best
New

Posted by littlecranky67 8 hours ago

Tell HN: docker pull fails in spain due to football cloudflare block

I just spent 1h+ debugging why my locally-hosted gitlab runner would fail to create pipelines. The gitlab job output would just display weird TLS errors when trying to pull a docker images. After debugging gitlab and the runner, I realized after a while I could not even run "docker pull <image>" on my machine as root:

> error pulling image configuration: download failed after attempts=6: tls: failed to verify certificate: x509: certificate is not valid for any names, but wanted to match docker-images-prod.6aa30f8b08e16409b46e0173d6de2f56.r2.cloudflarestorage.com

First blaming tailscale, dns configuration and all other stuff. Until I just copied that above URL into my browser on my laptop, and received a website banner:

> El acceso a la presente dirección IP ha sido bloqueado en cumplimiento de lo dispuesto en la Sentencia de 18 de diciembre de 2024, dictada por el Juzgado de lo Mercantil nº 6 de Barcelona en el marco del procedimiento ordinario (Materia mercantil art. 249.1.4)-1005/2024-H instado por la Liga Nacional de Fútbol Profesional y por Telefónica Audiovisual Digital, S.L.U. https://www.laliga.com/noticias/nota-informativa-en-relacion-con-el-bloqueo-de-ips-durante-las-ultimas-jornadas-de-laliga-ea-sports-vinculadas-a-las-practicas-ilegales-de-cloudflare

For those non-spanish speakers: It means there is football match on, and during that time that specific host is blocked. This is just plain madness. I guess that means my gitlab pipelines will not run when football is on. Thank you, Spain.

455 points | 203 commentspage 2
pfortuny 3 hours ago|
> instado por la Liga Nacional de Fútbol Profesional y por Telefónica Audiovisual Digital,

(The trial was initiated by LaLiga and Telefonica...).

"Telefonica" is the (exclusive) distributor for the rights of streaming the matches, and is only (of course?) the main consumer (and business) Telco in Spain: they are in a game they cannot lose. This is such an abuse and no government (this, past, whichever) has done anything about it.

swiftcoder 2 hours ago|
It is also educational to look up the overlap between Telefonica directors, LaLiga directors, and the government officials who granted the defacto monopoly
amarant 3 hours ago||
I had to Google why this happens, blocking cloudflare during football games seems.. Arbitrary, to say the least. Maybe something to do with hooligans trashing entire cities when their team loses? I could almost get behind that, if I thought it would work..

But no, it's apparently to stop piracy!? Turning off half the internet, and mostly the legitimate parts at that (since when do pirates use cloudflare?) seems like probably the worst method to go about it.

Someone ought to start streaming those games illegally without using cloudflare just to demonstrate how stupid this policy is

swiftcoder 2 hours ago||
> Someone ought to start streaming those games illegally without using cloudflare just to demonstrate how stupid this policy is

Oh, the icing on the cake is that they already do. While my whole dev stack gets shut off every weekend, my neighbour watches pirate futbol streams just fine - not only is it a stupid policy, it's an ineffective one, and the pirates bypassed the bans ages ago

amarant 1 hour ago||
Makes you wonder why they keep the ban up? Are more people watching more football now that everything else stops working during matches?

Talk about unfair business practices!

HDThoreaun 1 hour ago||
Pirates use cloudflare because it solves their biggest problem, DOS attacks. Rights owners figured out that they can shut down these sites by DDOSing them which bypasses the courts and can be done instantly, so the pirates put their sites behind cloudflare ddos protection.
ordersofmag 3 hours ago||
Interesting alternative. Cloudflare (market cap $58B) buys La liga (market value $5 billion), drops suit.
lokar 2 hours ago||
Set an example. Buy them, fire everyone, shut it down and liquidate the property.
outside2344 3 hours ago||
Less headaches, free futbol matches!
jesuslop 2 hours ago||
Just to confirm it is true. This is LaLiga bringing down essential country-wide infrastructure on soccer hours if your internet access is through main ISPs.
Kamshak 3 hours ago||
I'm in Spain as well and it sucks a lot. What I do now is I go thorough Cloudflare 1.1.1.1 VPN (set up on my router). Fixes the issue and there is practically no latency or bandwidth impact.
giorgioz 4 hours ago||
POSSIBLE FIX:

I think changing your default DNS servers to Google 8.8.8.8 or Cloudflare 1.1.1.1 might bypass the spanish sunday ban on Cloudlflare.

macOS + Cloudlfare 1.1.1.1 https://developers.cloudflare.com/1.1.1.1/setup/macos/

Google 8.8.8.8 https://developers.google.com/speed/public-dns/docs/using

echoangle 4 hours ago||
I don’t think it’s a DNS ban, it looks like they actually ban connections to the IP range.

But you can just use a VPN.

LtdJorge 3 hours ago||
Nope, it’s IP ban. At least for Vodafone and Telefónica.
vaylian 7 hours ago||
This is a know issue and it is completely fucked up: https://www.techradar.com/vpn/vpn-privacy-security/cloudflar...

What Spain does is basically censorship and it's very poorly executed. The docker image registry is only one out of the many collateral victims of this stupid law.

embedding-shape 4 hours ago|
> What Spain does is basically censorship and it's very poorly executed

Basically? It is censorship, with huge collateral damage and regardless of how much we complain or share evidence that the blocks are actually financially harming us, no one seems to care as long as La Liga gets to freely block whatever hoster of websites as they wish.

ryandrake 4 hours ago||
It's just like the Great Firewall of China, except in service of football profits instead of political ideology. I don't know which one is dumber and more disgraceful.
embedding-shape 3 hours ago||
I wouldn't say "instead of", just "also", these "football blocks" are not the first cases of censorship of the internet in Spain.

womenonweb.org for example was inaccessible for years, just unblocked some years ago. During the latest Catalan independence referendum, the Spanish government blocked a bunch of websites, not the very least the official website of the referendum itself.

This is just one of the most recent cases, and so far the one with widest regular impact.

thomasjudge 2 hours ago||
Could you bypass this with a VPN?
tossandthrow 2 hours ago|
Yes, and all of Spain is learning how to use VPNs
Jare 5 hours ago||
It's a disgrace, but apparently all relevant forces still consider soccer the most important thing in the country.
postepowanieadm 2 hours ago|
Why are you working instead of watching the match?
More comments...