Error pulling image from ECR through Internet proxy

0

Hi, we are getting an error pulling images from ECR private repositories from a server that get access to Internet through a web proxy. We ask proxy admin to allow access to <ACCOUNT_ID>.dkr.ecr.us-east-2.amazonaws.com. We are using aws cli to authenticate with amazon and docker, docker login is successful with aws token, however when we pull the image we get an error like this, after some timeouts reported by docker trying to get image layers:

error pulling image configuration: download failed after attempts=6: dial tcp 52.219.102.138:443: i/o timeout

Docker pull command is something like:

docker pull <ACCOUNT_ID>.dkr.ecr.us-east-2.amazonaws.com/<repository>:<TAG>

Appreciate your help, what are we missing ? Is there some additional domain/endpoint we have to enable access on web proxy configuration ? Do we need add https://api.ecr.us-east-2.amazonaws.com/ to web proxy allowed targets ? Something else ?

Appreciate your help.

1 Answer
0

Need to communicate with the following endpoints.

dkr.ecr.us-east-2.amazonaws.com
api.ecr.us-east-2.amazonaws.com
s3.us-east-2.amazonaws.com

Also consider using VPC Endpoints.
https://docs.aws.amazon.com/AmazonECR/latest/userguide/vpc-endpoints.html

profile picture
hayao-k
answered a year ago
  • Thanks, your help is appreciated. We validated successfully we can reach these endpoints with curl, however we get the same error when tried to pull the image. Getting the ECR token and therefor docker login to ECR is successful. However image pull fails miserably with a timeout error.

    We noted that s3 https://s3.us-east-2.amazonaws.com endpoint returns a redirect to https://aws.amazon.com/s3/ , we follow the redirect successfully also.

    Is like docker pull operation use another endpoint/domain, or get in conflict with proxy. We ensure also proxy env variables targeting to we proxy were set before all tests.

    Appreciate your help.

    Best !

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions