With a private registry, I cannot pull images because certains image layers fail to download. The pattern seems to be that this happens with larger, 50MB sized layers. It shouldn't be a registry neither network problem as colleagues with other systems manage to get these images.
6bbedd9b76a4: Pulling fs layer fc19d60a83f1: Download complete de413bb911fd: Download complete 2879a7ad3144: Download complete 668604fde02e: Download complete f257ac562635: Download complete 07486ea9391a: Download complete c131a1091dea: Download complete e4e87f3caf2a: Downloading 6ef05c7ca3e3: Retrying in 1 second 85b7b45e23a1: Download complete 077ff1474b65: Retrying in 1 second f85147a0e9d7: Waiting
Other errors on new retries with same image:
2c1171c58a199d2ec9daee729d88146dfb91caba4788: local error: tls: bad record MAC error pulling image configuration: tls: received record with version 5ea7 when expecting version 303
UPD. Strange enough, the very first image layer which always gets stuck before it downloads anything stucks rarely at "downloading... 987B".
UPD2. Same behaviour with Docker EE client (Docker-Client/17.03.0-ee-1)
UPD3. Filed this as a bug to the Moby project.