Does Docker Work in China?

Is Docker Hub blocked in China?

Yes. Docker Hub is blocked on Chinese networks, so image pulls from it fail. GreatFire, a project that tracks blocking from inside mainland China, answers “No” for hub.docker.com, as of October 11, 2026, and for registry-1.docker.io, Docker Hub’s registry address, as of September 20, 2026. GreatFire puts this down to DNS poisoning and silently dropped packets, which make requests time out. Docker’s documentation site, docs.docker.com, gets “Sometimes”, as of October 18, 2026.

Why Docker Hub doesn’t work in China

Docker’s staff put it down to China’s network, not to Docker. In July 2024, Brett Inman of Docker wrote on Docker Hub’s issue tracker that “Docker has no intention of blocking access to Docker Hub from China”, and that many users there had incorrect DNS records for Docker’s servers or other network problems. A month earlier, he told a user in China that their DNS had returned a Twitter address for Docker’s CDN. In August 2024, Sebastiaan van Stijn, a principal software engineer at Docker, wrote that to his knowledge Docker doesn’t deny access from China, and that the Great Firewall has sometimes blocked it.

Docker Hub China mirrors: what happened

Several public Docker Hub mirrors in China closed or narrowed in 2024, their operators’ notices show:

• USTC. The University of Science and Technology of China’s mirror stopped serving Docker Hub off campus in August 2022, after it learned Alibaba Cloud’s Docker Hub mirror had stopped updating. On June 6, 2024, it “temporarily” closed its Docker Hub cache, citing force majeure (our translation). Bandwidth and other limits have since suspended all its container caches, it says.
• DaoCloud. Its public mirror started rate limits on June 13, 2024, and a whitelist on June 18. It refuses some images, including anything to do with circumvention tools or piracy (our translation). Since July 14, 2024, it serves only mainland China.
• Alibaba Cloud. Its help page, updated in June 2026, says its image accelerator has stopped syncing the latest images and is only for personal development, with no commercial use.
• Tencent Cloud. Its guide, updated in July 2026, limits its overseas image acceleration to container service customers inside Tencent Cloud’s private network. From the public internet, the addresses respond but don’t speed anything up.

Docker’s documentation explains how to run your own pull-through cache. Only Docker Hub can be mirrored this way, it says, and mirrors still fall under Docker’s fair use policy.

Docker China registry

The China mirror that Docker’s documentation used to list is gone. The docs called registry.docker-cn.com “the registry mirror for China” until August 27, 2019, when Docker removed the section. For images that need to load inside China, DaoCloud suggests their authors publish them to Alibaba Cloud’s or Huawei Cloud’s registries, and Alibaba Cloud lets its customers subscribe to images hosted abroad.

Installing Docker in China

Installing Docker is easier, because its packages are mirrored in China. USTC’s mirror site keeps a copy of Docker’s official Docker CE repository for every platform Docker supports, including Linux, Windows and macOS. Docker’s own download.docker.com gets “Sometimes” from GreatFire, as of September 30, 2026, and desktop.docker.com gets “Yes”, as of October 10, 2026.

How to use Docker in China

Docker Hub only loads from China over a connection that exits the mainland. Roaming eSIMs and VPNs both provide one, if set up at home. Do I need a VPN in China if I have an eSIM? explains the trade-offs.

Roaming eSIM. Holafly, which sells eSIMs, says its China eSIM reaches WhatsApp, Google and Instagram without a separate VPN. A laptop would use its hotspot allowance, which is 1 GB a day. A traveler on r/travelchina said in June 2026 that a Holafly hotspot had served a phone and a notebook at once. Hotspot rules for other providers are on our eSIM page.

VPN. Image pulls go through the Docker daemon, which needs its own way out. Docker’s documentation explains how to give it a proxy server, and says Docker Desktop ignores proxy settings in daemon.json and uses its own. Docker Desktop networking can work when attached to a VPN, Docker adds. Sign in to Docker Hub first. It allows signed-out users 100 pulls per six hours per IPv4 address, against 200 for a free signed-in account. Behind a VPN, Docker Hub sees the VPN’s shared address, the inlets blog warned in 2020. See which VPN works in China now for recent reports, and corporate VPNs in China for employer VPNs. Australia’s government warns that using services to bypass China’s internet restrictions may be illegal and can attract penalties, including imprisonment. Is using a VPN legal in China? sets out what that means for a visitor.

Docker in China: what users report

Reports from 2025 and 2026 agree that Docker Hub doesn’t load from China without help. They describe single setups, not tests.

• NAS pulls, January 2025 and February 2026. A NAS owner in China wrote on r/synology that Docker Hub wasn’t available, though GitHub’s and LinuxServer’s registries worked. A year later those often failed too, so they pulled images on a laptop connected to a VPN and loaded them onto the NAS.
• Dead mirror, January 2026. Someone living in China wrote on r/docker that pulls failed even with a mirror set, because Docker kept trying to reach Docker Hub’s registry. The mirror was Docker’s old China address, dropped in 2019.
• VPN on a NAS, January 2026. A QNAP owner in China could share an Astrill VPN with other computers through a proxy address, but not with the NAS they wanted Docker Hub on.
• Own registries, August 2026. MEV, a software company with a project in China, says parts of Docker Hub were unreachable there, so it chose mirrors and built its own registries.

Related guides

• GitHub in China
• AWS in China
• Microsoft Azure in China
• Working remotely from China
• Corporate VPN in China