TLS handshake timeout to registry-1.docker.io from VPS#464

My VPS cannot pull Docker images from Docker Hub.

Server IP: 74.48.108.85

Docker pull fails with:

TLS handshake timeout to registry-1.docker.io:443

Example:

docker pull eceasy/cli-proxy-api:latest

Error:

failed to do request: Head “https://registry-1.docker.io/v2/eceasy/cli-proxy-api/manifests/latest": net/http: TLS handshake timeout

The server can access GitHub and Cloudflare normally, with around 2-3 MB/s download speed. The issue appears specific to Docker Hub Registry. TCP connection to registry-1.docker.io:443 is established, but TLS handshake does not complete.

I have tested IPv4, disabled IPv6 temporarily, and enabled TCP MTU probing, but the issue persists.

Please check routing/filtering/rate-limit/firewall or upstream connectivity from this VPS/IP to registry-1.docker.io:443.