VPN and DPI: how the state is looking for new ways to block Internet resources

[root]

Out of ten VPN services that Roskomnadzor demanded the day before to connect to the system for blocking resources prohibited in Russia (FSIS), only one has so far agreed (Kaspersky Secure Connection). OpenVPN, VyprVPN, TopGuard and VPN Unlimited services refused to cooperate with the supervisory authority.

The rest of the VPN services have not yet commented on the situation.

The requirements of Roskomnadzor for VPN to join traffic filtering are contrary to the constitution, says Pavel Chikov, head of the Agora International Human Rights Group. “This is a violation of the right to freedom of access to information. Under article 29, part 4 of the Constitution of the Russian Federation, everyone has the right to freely seek, receive, transmit, produce and disseminate information by any legal means. They (VPN services) are forced to connect to the system, which should block prohibited content, ”he explains.

In his Telegram channel, Chikov said that a VPN that refused to cooperate would receive a lawyer from Agora in case of complaints. According to Chikov, VPN services, which will begin to cooperate with the supervisory authority, may receive claims from users.

Is network neutrality at risk?
The requirement of Roskomnadzor for VPN services is understandable. The loudest action of the traffic filtration department - the Telegram blocking, which officially began a year ago - still has not brought the desired results. According to Mediascope, in October 2018, 9.3 million people used the application compared to 7.2 million a year earlier and against 9 million people who used Telegram in March 2018, on the eve of the block. The office of Alexander Zharov is considering various measures to limit access to the messenger.

Therefore, Roskomnadzor continues to consider various measures to restrict access to prohibited resources - in particular, the use of DPI systems (Deep Packet Inspection - data packet analysis system). Such systems allow filtering data traffic by analyzing encryption algorithms and determining the resources to which this traffic belongs. On the eve of Vedomosti, citing sources wrote that testing the DPI-system "RDP.ru" showed 100% efficiency of the solution "RDP.ru" to block Telegram. In 2016, Rostelecom invested in "RDP.ru" 130 million rubles a couple of years ago. “Now it’s time to monetize the investment,” concludes Nikita Tsaplin, managing partner and founder of the Russian hosting provider RUVDS.

“Since the end of 2017, Roskomnadzor has been testing various DPI systems: SKAT DPI from VAS Experts, Carbon Reductor DPI from Carbon Soft and EcoFilter from RDP.ru,” says Tsaplin. - In total, seven systems received a positive conclusion: UBIC, EcoFilter, SCAT DPI, Thixen-Lock, SkyDNS Zapret ISP, Carbon Reductor DPI and ZapretService as of the beginning of 2018. Now the best solution has been selected, hopefully, which will ultimately be recommended to operators. ”

Operators will be able to refuse to use DPI-reliable systems that Roskomnadzor believes. But if the agency identifies the prohibited resources in the traffic they represent, then the operators will have to pay a fine.

“Now IP and domain blocking is in effect, but the Inspector system used by Roskomnadzor still finds forbidden resources from providers,” Tsaplin explains. - For providers, this means a warning for the first violation, and then a fine. Previously, the fine was 30,000 rubles for each unblocked site, and since 2018 their size has increased to 50,000-100,000 rubles. For small operators, this is significant, especially if several claims come at once. The cost of systems is not cheap: DPI prices start at $ 50,000- $ 75,000.

“DPI equipment was originally intended for the implementation by Roskomnadzor of blocking of prohibited resources, including Telegram. And if Telegram DPI can deal with varying degrees of success, then to “colorize” the protocol and prioritize the traffic of individual resources, using this equipment will give a 100% guaranteed result, ”says Alexander Lyamin, Qrator Labs CEO. - Prioritization of traffic is one of the main functions of DPI-systems. Accordingly, there is a temptation to abolish the principle of network neutrality ".

Using DPI-systems, including “RDP.ru” recommended by the Ministry of Communications, telecom operators will be able to deliberately reduce the speed of access to Facebook, YouTube or any other resource and take from the operators of these information services an additional fee for the normal access speed of users. “Nothing prevents telecom operators from getting into their pocket” and to users themselves and introducing special rates for them, for example, “Social Networks” or “YouTube”. The state itself can also see additional opportunities in this, transferring bills for DPI equipment to end users and the Internet business, Lyamin says. - I have to admit that Russia here completely repeats the path that the United States is following, where network neutrality has also been abolished. Ultimately, such actions will lead to higher prices for the Internet for both business and ordinary users. ".

Material Forbes , Ekaterina Kinyakina .