Discussion

jimaek: Off topic but I wonder when Cloudflare is going to launch their own Docker registry as a product.

sigio: Time to use a VPN in your docker pipelines ;) Or run your systems outside of Spain.Or can this be avoided by using an alternate DNS?

darkwater: They are planning to also block VPN providers during football matches, see https://www.techradar.com/vpn/vpn-privacy-security/la-liga-w...

Mordisquitos: They are not "planning" to block VPNs. A technologically illiterate judge has ordered it, but there are no plans nor mechanisms to enforce it.

anthk: Yea, La Liga it's crapping out as always. Docker needs either some I2P gateway, or a Tor service.

mathfailure: Cloudflare is cancer. And the tumor is now too big.

petcat: Spain is mandating their ISPs block cloudflare to stop people from illegally streaming soccer games. Cloudflare isn't the one doing the blocking.

Cpoll: You've got it backwards. Spain's ISPs are blocking Cloudflare and other CDNs because of LaLiga/football piracy. CloudFlare isn't doing anything here.

chrismustcode: If they can block IPs of cloudflare what extra mechanisms would be needed to block VPN IPs?

StrLght: You made a few typos in "LaLiga"

pjc50: This is why technology businesses and professionals need to take a little bit of an active role in local politics. Otherwise you get nonsense.

skgsergio: Alternate DNS doesn't help, they block at IP level.Yes, they block IPs belonging to CDNs (CF including R2, BunnyCDN, CDN77, Fastly, Alibaba, Akamai even)...

ufocia: How so?

sph: You are correct, but Cloudflare is still a cancer on the Internet.

chmod775: The only viable way to even get most of them is to shut down internet access entirely. It's not a realistic solution, unlike blocking a few well known IP ranges belonging to a large corp like Cloudflare.And even if you managed to get them all beforehand, some VPN providers will adapt and keep some servers in reserve, putting them online just as you managed to block the previous ones. Getting around internet censorship is a large chunk of their business, and some are really good at it.

utrack: They block the whole of Cloudflare R2, I believe the Docker hub is just (heh) a collateral.When the La Liga match starts, everything that's proxied via CF (including zero access reverse tunnels) stops working.There's even a website made for checking if the match is on: https://hayahora.futbol/You can check if your host is affected: https://hayahora.futbol/#comprobador&domain=docker-images-pr...

mr_mitm: Why do they do that? Sorry, I don't speak Spanish.

quadrifoliate: Here's a good English-language article about it, with a timeline: https://daniel.es/blog/cloudflare-vs-la-liga/Looks like same old regulatory capture.

ShowalkKama: to """"""""""prevent piracy""""""""""

danirod: [delayed]

wqtz: Well, Cloudflare does not launch anything. They acquire to build products. Look into all their recent product launches. They acquired a relatively small company and converted the founding team to a product team.So, if you want them to build stuff, ask yourself, are there any "Docker Registry" startups out there. If jsdelivr/globalping is not keeping you busy enough... there is an idea

richwater: Spain is a failing country. Their economy is in shambles and the government has ceded internet control to a private corporation who runs football games.

darkwater: The exact same stupid mechanism they are already using. Forcing ISPs to blackhole whole subnets if they belong to the VPN provider ASN(s).

freetanga: All people affected should file a complaint with your ISP and with Oficina de Atención al Usuario de Telecomunicaciones claiming financial loss for arbitrary service censorship.

littlecranky67: It is not a DNS based block, but on the IP level. Once I knew what caused the issue, I figured I use one of my Hetzner vServers as an exit node in tailscale.But come on, this can't be true. I wonder how many other people in IT wasted hours on issues and tickets to find out it due to a football match taking place. Admitted, chances are low as football matches are usually outside of office hours.

jimaek: Honestly I would build it if I knew how to properly market it to quickly get users.Globalping and jsDelivr took years to gain a meaningful user base

bakugo: Sadly, it won't accomplish anything. La Liga seems to have enough political power in the country to bury all of that. Probably bribing everyone involved.

pixl97: Yep, flood them with complaints.

pxc: [delayed]

prmoustache: When talking about VPNs, it doesn't have to mean "third party VPN". You can host your own on any VPN service outside of Spain.

darkwater: Yes, but that's not something many can do easily. Also already having to use a VPN is not the "right" solution. The right so solution is to beat some sense inside some politician's head, and force them to write and approve laws that don't let stupid (or conniving) judges pass orders like this one we are talking about.

prmoustache: I agree it is not the right solution.But anyone who is pulling docker images in a sunday afternoon while the rest of the country is glued to their screen to watch a football game or enjoying a sunny sunday outside having beers and tapas and what not should be capable of setting up wireguard.

DocTomoe: That's an interesting euphenism for 'spend a massive amount of money on ~~corruption~~ lobbying',

petcat: Rampant bot traffic and scrapers are the real cancer. Until that goes away everyone is going to need cloudflare or some other bot firewall service.

adrian_b: Perhaps that is true, but the Cloudflare anti-bot protection is too stupid and annoying.They should have used a cookie or something else that does not require asking me every few minutes to prove once more that I am not a bot.There was a time when Cloudflare had become less intrusive, but for the last months it has begun again to intervene almost each time when opening some pages.

wqtz: I do not think that is the issue. The recent acquisitions from all these big tech companies did not have any "meaningful" user base to begin with.I think your name alone carries significant weight in the industry and you have built a very large community.If you even vibe code something with, you will get a stupid amount of money thrown at you and a contract that bounds your existing projects and the next 3-5 years to a particular company as project lead.Here is a list of acquisitions Cloudflare made recently: https://blog.cloudflare.com/tag/acquisitions/Most of these companies did not have a half dozen paying customer or even a fully fleshed-out product before they were acquired.