Skip to content
Snippets Groups Projects
Commit 4a6b0bffab1b authored by Evan Read's avatar Evan Read
Browse files

Merge branch 'dkua1-master-patch-fc54' into 'master'

Adding our CloudFront URL to firewall settings

See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7218



Merged-by: default avatarEvan Read <eread@gitlab.com>
Approved-by: default avatarRobert Marshall <rmarshall@gitlab.com>
Approved-by: default avatarMitchell Nielsen <mnielsen@gitlab.com>
Approved-by: default avatarEvan Read <eread@gitlab.com>
Reviewed-by: default avatarEvan Read <eread@gitlab.com>
Co-authored-by: default avatarDaphne Kua <dkua@gitlab.com>
No related branches found
No related tags found
3 merge requests!114heptapod#1394: making 1.0 the oldstable,!110heptapod#1352: merged heptapod branch into heptapod-stable,!108GitLab 16.6: merged first commit of upstream stable branch
......@@ -997,3 +997,22 @@
After the repository is synced, you can create a publication and distribution to
make it available. See <https://docs.pulpproject.org/pulp_rpm/> for details.
## Error: `E: connection refused to d20rj4el6vkp4c.cloudfront.net 443`
When you install a package hosted on our package repository at `packages.gitlab.com`, your client will receive and follow a redirect to the CloudFront address `d20rj4el6vkp4c.cloudfront.net`. Servers in an air-gapped environment can receive the following errors:
```shell
E: connection refused to d20rj4el6vkp4c.cloudfront.net 443
```
```shell
Failed to connect to d20rj4el6vkp4c.cloudfront.net port 443: Connection refused
```
To resolve this issue, you have three options:
- If you can allowlist by domain, add the endpoint `d20rj4el6vkp4c.cloudfront.net` to your firewall settings.
- If you cannot allowlist by domain, add the [CloudFront IP address ranges](https://d7uri8nf7uskq.cloudfront.net/tools/list-cloudfront-ips) to your firewall settings. You must
keep this list synced with your firewall settings because they can change.
- Manually download the package file and upload it to your server.
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment