Docker Hub Pull Rate Calculator

The most common cause is unauthenticated pulls from shared CI runner IPs. GitHub Actions, GitLab CI SaaS, and CircleCI cloud runners share IP addresses with thousands of other users. The 10 pulls per hour unauthenticated limit applies to the entire IP — not just your team. So even if you only run a few builds, other users on the same IP are consuming the limit. The fix is to add docker login to your CI pipeline using a free Docker Hub account, which raises your personal limit to 100 pulls per hour per user.

On April 1, 2025, Docker Hub reduced unauthenticated pull limits from 100 pulls per 6 hours per IP to 10 pulls per hour per IP — a 10x reduction in effective rate. Authenticated free accounts dropped from 200 pulls per 6 hours to 100 pulls per hour — which works out to roughly the same effective throughput. Paid plans (Pro, Team, Business) remain unlimited under fair use policy.

Yes. When you pull a multi-architecture image, Docker fetches the manifest list and then pulls the specific architecture layer. However Docker also caches the manifest lookup. In practice, building for both amd64 and arm64 in the same pipeline effectively counts each architecture as a separate pull against your limit. If your CI builds multi-arch images using docker buildx, you should account for 2x pulls per FROM statement.

Try the free alternatives first — they solve the rate limit problem at no cost. Adding docker login to your CI (free account, 100/hr per user) solves most small team issues. Using AWS ECR Public Gallery (public.ecr.aws) mirrors popular images with no limits and requires zero authentication. Only upgrade to Pro ($9/mo) or Team ($15/user/mo) if you specifically need the Docker Hub ecosystem features like Docker Scout vulnerability scanning, Build Cloud minutes, or org management — not just for rate limits alone.

Both Pro and Team offer unlimited pulls. Pro ($9/month) is designed for a single developer — one user account, unlimited private repositories, 200 Docker Build Cloud minutes, and 2 Docker Scout repos for vulnerability scanning. Team ($15/user/month) adds multi-user organization management, role-based access control so you can control who can push to which repos, audit logs, and unlimited Docker Scout repos. Team has a minimum of 25 seats for new customers as of 2025. If you are a solo developer, Pro is sufficient. If you have a team that needs shared access and permission control, Team is necessary.