# Setting up dockerhub proxy

**URL:** <https://community.sonatype.com/t/setting-up-dockerhub-proxy/6652>\
**Category:** Sonatype Nexus Repository\
**Created:** [June 2, 2021, 8:43pm UTC](https://community.sonatype.com/t/setting-up-dockerhub-proxy/6652 "2021-06-02T20:43:59Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![btucker](https://avatars.discourse-cdn.com/v4/letter/b/5daacb/32.png) [@btucker](https://community.sonatype.com/u/btucker)\
**Post date:** [June 2, 2021, 8:43pm UTC](https://community.sonatype.com/t/setting-up-dockerhub-proxy/6652/1 "2021-06-02T20:43:59Z")

</div>

The Good:  
We successfully setup an ALB in AWS routing traffic to a target group hosting our nexus server.  
This allows traffic coming in for nuget, npm and pypi hosted and proxy repositories without any issues.

The Bad:  
We attempted to setup a docker hub proxy and followed the documentation. Note that we have tried both http and https in the setup and both seem to timeout and error.

https:  
traffic is getting fed down to the target group without issues and then it seems to be throwing target errors and 504 gateway timeouts.

http:  
traffic seems to get fed to the target group appropriate then the command threw an error about http coming from https as the docker pull command attempted to use https. As a work around we added the server to the list of insecure registries and set it to be the mirror for [docker.io](http://docker.io) and tried a pull that way.

At that point the behavior went back to the timeout but instead of throwing a 504 it fell back to [docker.io](http://docker.io) and successfully pulled container image.

* * *

So it looks like from our logs the request hits the alb and then routes appropriately to the target group. The target group then attempts to send to nexus on the same port the connector for the proxy is set to and that’s where things seem to break down. It seems like the repository connector port isnt open like we would expect it to be. We didn’t have to do anything special to get nexus running or the other repositories in terms of ports so I am not really sure why this is causing such a headache.  
Any advice on this? everything else seems to work appropriately

EDIT - as an update it looks like the nexus logs see the traffic coming in and throws a 404 looking for a pretty generic image. In this case ubuntu. So it seems like its not hitting the index properly or something. I thought perhaps this was a timing issue where the timeout for searching is longer than the timeout for the pull command from the dockerdaemon or the alb timeout (300 seconds). Which would potentially result in the 504s coming from the AWS side but the log on the proxy side showing the 404 error as it continued its search? Thats really just a guess. That being said that begs the question as to why it cant get out to the actual dockerhub index

I verified the SG the instance is in allows all outbound traffic. further verified by the other proxy repos pulling and caching packages correctly.

---

_[View the full topic](https://community.sonatype.com/t/setting-up-dockerhub-proxy/6652)._