Docker-Proxy/Issue/issue.en.md

<a href="./README.md">中文</a> | <strong>English</strong>

Deployment and Usage Issues Summary for Docker Proxy Service.

---

Docker Proxy-Communication Group

---

👨🏻‍💻 Problem Summary

1. Unable to delete a specific image tag through the UI.

Known Issue： Deletion is not supported when using registry as a proxy cache.

Related Issues： #3853

2. The pull speed from within China is not ideal.

Known Issue： The network route from your foreign server to China is suboptimal.

Solutions：

• (1) Enable BBR on the server to optimize network performance (with limited effect).
• (2) Switch to a server that has better network optimization for routes to China.

3. How long does the registry image cache last, and how to adjust it?

Known Issue： The default cache time is 168 hours, which is 7 days. Adjust the cache time by modifying the ttl in the proxy configuration section of the configuration file

4. Regarding the solution for pulling images from the 'Hub' public namespace with or without adding the 'library' prefix when using a mirror registry for acceleration.

• This scheme was provided by a senior member in the communication group and has been implemented and tested through Nginx.

  http {
  map $http_upgrade $connection_upgrade {
      default upgrade;
      ''      close;
  }
  
  server {
      listen 80;
      server_name hub.your_domain.com;
  
      # 在docker hub的配置中添加下面的location规则
      location ~ ^/v2/([^/]+)/(manifests|blobs)/(.*)$ {
          rewrite ^/v2/(.*)$ /v2/library/$1 break;
          proxy_pass http://127.0.0.1:51000;
          proxy_set_header Host $host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_set_header REMOTE-HOST $remote_addr;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection $connection_upgrade;
          proxy_http_version 1.1;
          add_header X-Cache $upstream_cache_status;
      }
  
      location  / {
          proxy_pass http://127.0.0.1:51000;
          proxy_set_header Host $host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_set_header REMOTE-HOST $remote_addr;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection $connection_upgrade;
          proxy_http_version 1.1;
          add_header X-Cache $upstream_cache_status;
      }
  }
  }
  

5. An error occurs when pulling an image tls: failed to verify certificate: x509: certificate signed by unknown authority

Known Issue： Certificate issue. Indicates that the certificate was issued by an unknown or untrusted certificate Authority (CA).