# HG changeset patch # User Daphne Kua <dkua@gitlab.com> # Date 1698379083 0 # Fri Oct 27 03:58:03 2023 +0000 # Node ID de5fcf733600e9bf5350a0e4382620dc87d73a93 # Parent 3580ebd12b93d514b68676b73350e376ded97103 Adding our CloudFront URL to firewall settings diff --git a/doc/troubleshooting.md b/doc/troubleshooting.md --- a/doc/troubleshooting.md +++ b/doc/troubleshooting.md @@ -997,3 +997,22 @@ After the repository is synced, you can create a publication and distribution to make it available. See <https://docs.pulpproject.org/pulp_rpm/> for details. + +## Error: `E: connection refused to d20rj4el6vkp4c.cloudfront.net 443` + +When you install a package hosted on our package repository at `packages.gitlab.com`, your client will receive and follow a redirect to the CloudFront address `d20rj4el6vkp4c.cloudfront.net`. Servers in an air-gapped environment can receive the following errors: + +```shell +E: connection refused to d20rj4el6vkp4c.cloudfront.net 443 +``` + +```shell +Failed to connect to d20rj4el6vkp4c.cloudfront.net port 443: Connection refused +``` + +To resolve this issue, you have three options: + +- If you can allowlist by domain, add the endpoint `d20rj4el6vkp4c.cloudfront.net` to your firewall settings. +- If you cannot allowlist by domain, add the [CloudFront IP address ranges](https://d7uri8nf7uskq.cloudfront.net/tools/list-cloudfront-ips) to your firewall settings. You must + keep this list synced with your firewall settings because they can change. +- Manually download the package file and upload it to your server.