Production.cloudflare.docker.com connection reset by peer

I can’t pull anything more than ubuntu or hello-world from docker registry.

$ docker pull mariadb
Using default tag: latest
latest: Pulling from library/mariadb
6cf436f81810: Downloading [==================================================>] 32.37MB/32.37MB
987088a85b96: Download complete
b4624b3efe06: Download complete
d42beb8ded59: Download complete
5badffea4c42: Download complete
6107652a946b: Downloading [==================================================>] 3.95MB/3.95MB
1b31669dbe65: Download complete
4d884b22dc63: Download complete
cee72f2b293c: Download complete
33323ef67397: Download complete
1b364bf6e762: Download complete
eda57ae34af9: Downloading 563.9kB
1858d4218800: Download complete
bcf4f917fabf: Download complete
read tcp 91.121.108.196:42796->104.18.125.25:443: read: connection reset by peer

same thing for gitlab/gitlab-ce

cloudflare host (every IP address resolved for production.cloudflare.docker.com) sends EOF before SSL handshake.

what does it mean? could you explain?