Aliyun Container Registry Proxy

Accelerate and stabilize access to Aliyun Container Registry using our fully compatible Shanghai-region proxy endpoints.
The acr-sh prefix identifies the Shanghai ACR region and proxies image pulls from:

registry.cn-shanghai.aliyuncs.com

Get started

Use the proxy as a drop-in replacement for the native ACR domain.
No configuration changes are required beyond updating your image paths.

Faster and more stable pulls
Shanghai-region entrypoints for registry.cn-shanghai.aliyuncs.com
Fully compatible with standard Docker / OCI workflows
Access control enabled for security

Access control

This service enforces network-level access authorization.

Test connectivity:

1	`curl -s https:/acr-sh.kubectl.net/-/access/test`

Expected responses:

Access Allowed
Access Denied

For support or inquiries: dev@intellij.io

Proxy endpoints

Use any of the following Shanghai-region mirrors:

Proxy endpoint	Region	Upstream registry
acr-sh.kubectl.net	Shanghai (`cn-shanghai`)	registry.cn-shanghai.aliyuncs.com
acr-sh.m.kubectl.net	Shanghai (`cn-shanghai`)	registry.cn-shanghai.aliyuncs.com

Both entries behave identically and support all Shanghai ACR image paths.

Example usage

For Shanghai ACR images, replace the upstream registry:

1	`registry.cn-shanghai.aliyuncs.com`

with:

1	`acr-sh.kubectl.net`

Example:

1	`docker pull acr-sh.kubectl.net/svcops/debian-ext:12`

Notes

Only public Aliyun image paths supported
No rewriting or modification of image content
For CI/CD or production workloads, run the access test before deployment