Russian Internet regulation
update: routing control
RIPE78, Reykjavík

First regulations
Telephony-like formal licensing (thus not working), required to provide paidservices.
Internet is regulated “Public services network”. “Certified equipment”. No ITU
recommendations - no other requirements. Some additional protection forend-users, some - for network operators.

Bulk wiretapping: SORM. On the account of operators!

Regulations development (1)Content blocking since 2012.
-intransparency of procedures
operator’s responsibility (automated, but still intransparent)
mistakes, abuses, infrastructural failures

On account of operators

Regulations development (2)More wiretapping and data retention.
SORM-2-3 - user identification, access to billing information
Yarovaya - up to half year of ALL traffic storage
Everything on account of operators!

More subjects of regulation
When it appears that commercial network operators not exhaust all possible
subjects in the InternetОРИ (Information Distribution Intermediaries) - same obligations as for licensed
operators (but no protection).
News feeds, search engines...

Some more (failed) attempts to regulate
Number and Names distribution - appears no rights to regulate via (inter-)government organizations. (NIR attempt to be mentioned)“Download accounting” - a bit similar to “upload filters”, have not passed
Attempts to regulate interconnections and “national domain” - have not been
submitted to parliament

Motivation for “Sovereign Internet”“Aggressive US Cyber strategy”.
Legislation proposers can’t spell “routing” and “firewall” correctly
It is said, actual motivation s US hack of hostings used by troll farms.

“Sovereign Internet”
Regulates “(licensed) network operators, owners of communication networks,
Autonomous System Number holders” (“сети связи операторов связи,собственников или владельцев технологических сетей связи, а такжеиных лиц, имеющих номер автономной системы”)
Approves creation and gives authority to “Public Network Monitoring and ControlCenter (“центр мониторинга и управления сетью связи общегопользования”)AS number holders (and others) obligations
1)
2)
3)
4)
5)
6)
7)
8)
9)

follow rules of routing set up by regulator (RosKomNadzor)
apply corrections to routing, issued by regulator
resolve domain names using approved by regulator equipment
follow continuity rules set up by regulatorexecute orders issued by Control Centeruse only registered IXPs
report to regulator (ASN, routing policy, DNS resolution and networkinfrastructure equipment)
set up SORM and “technical equipment enforcing restrictions set by laws”
Participate in “security stability, continuity”,“trainings” (if enlisted to participate)

Regilatory documents needed
More than 30 documents by Government, Ministry of Telecommunications,
Regulator need to be written, discussed and approved, some of documents - also
approved by LEAs until 1 november 2019.
Work seems have not been started yet (publically).

Some other regulation subjects
Internet Exchange Points● must register● must connect entities only complying to LEA requirements● must comply “requirements” (set by RosKomNadzor&FSB)
National Domain Name system● domains of interest● domain name resolution must comply “requirements”
Cross-border communication systems
Technical security measures

Possible execution●●●

Enforced Routing Registry
BGP injections???

Negative impacts:●●●●

disappearance of self regulated sustainability
route leaks of “control messages”
interference to business processes (purge of independent ISPs), corruption
ability to move to Chinese or North Korean way

Name of the Article “Public Network Management in emergency situation”
changed to “Public Network Management in special cases”
Responsibility of operators in cases of outages caused by orders of Control Center
is waived.
“Technical Security Measures” - possible censorship system improvement

DURA LEX SED LEX.
Severity of Russian laws is compensated by the non-obligation of execution
Russian Laws are written not to be enforced, but to make you guilty

Notes on budgeting“Monitoring and Control Center” (first year?):
60 mln Euros: collection of information about IPadresses, ASNs, routing policies
75 mln Euros: routing monitoring and control

Compare to RIPE NCC’s RS, Database, RIS and Atlas

Why it’s important for RIPE community
Russia is ahead in state regulation of the Internet, despite some regulations havenot passed.
Internet is global - effects of local regulation could spread worldwide
We are on the same planet, there is no chance to move to better neighborhood(yet).

condolences ?

Internet Protection Society
Bringing up attention to really poor quality of Internet Regulations in Russia.
Bringing Internet Freedoms to Political Agenda

Projects:
1) Russian Internet Freedom Index
2) Russian Connectivity Index
3) Map of Russian Internet-GULAG