pullistFirewall openings needed to pull container images.

Quay.io

Red Hat's public registry. Hosts most OpenShift platform images and many open source projects.

HostPortsPurpose
quay.io443Registry API and token authenticationrequired
cdn.quay.io80 443Blob CDN (redirect target)required
cdn01.quay.io80 443Blob CDN (redirect target)required
cdn02.quay.io80 443Blob CDN (redirect target)required
cdn03.quay.io80 443Blob CDN (redirect target)required
cdn04.quay.io80 443Blob CDN (redirect target, added 2025)required
cdn05.quay.io80 443Blob CDN (redirect target, added 2025)required
cdn06.quay.io80 443Blob CDN (redirect target, added 2025)required

Notes

Blob content cannot be fetched from the CDN hosts directly - the registry issues short-lived signed redirect URLs. Open the hostnames, do not try to pin IP addresses.

Copy-paste

Plain domain list: quay.txt · JSON: quay.json · connectivity test: check-quay.sh

quay.io
cdn.quay.io
cdn01.quay.io
cdn02.quay.io
cdn03.quay.io
cdn04.quay.io
cdn05.quay.io
cdn06.quay.io

Verify from inside the network

curl -fsSL https://pullist.d0t.se/check-quay.sh | sh

Sources

Last verified: 2026-06-12 · data file: data/quay.yaml