Important firewall changes from 4 September 2024 for users that pull Container Registry images from global (icr.io)
To ensure continued worldwide performance for global registry (icr.io) in IBM Cloud® Container Registry, a content delivery network (CDN) is being enabled that means that you might have to adjust your firewall settings. If you need
to adjust your firewall settings, you must adjust them by 4 September 2024.
What you need to know about this change
If you use domain-based firewall rules, you must add the following domains. The domains accommodate future changes that might issue a redirect for certain requests such as an image layer download for traffic optimization. Regional registries are not impacted. For more information about regional registries, see Regions.
What actions you must take by 4 September 2024
If you use a public network to access the global instance of Container Registry by using the domain icr.io, you must add the following domains to your firewall rules by 4 September 2024:
dd0.icr.iodd2.icr.iodd4.icr.iodd6.icr.io
If you are located in China, you must also allow the following domains by 4 September 2024:
dd1-icr.ibm-zh.comdd3-icr.ibm-zh.comdd5-icr.ibm-zh.comdd7-icr.ibm-zh.com
For more information about Container Registry public access and firewall rules, see Accessing Container Registry through a firewall.
Original announcement
The original announcement was published on 1 July 2024.