May 12, 2014 at 12:09 Rostelecom introduces a new type of filtering Internet traffic. Not DPI
In Q3 2014, Rostelecom will finally introduce a system for paging filtering Internet traffic by URL.
Until now, this largest and most important telecom operator has been restricting access to Internet resources by IP address. Moreover, this often happened not only for users of this provider in Russia, but also for customers of those telecom operators in states adjacent to Russia (such as Armenia, Kazakhstan, Uzbekistan, Moldova, Belarus, etc.) who received Internet traffic from Russia on the highway.
According to Vedomosti:
In test mode, a new type of filtering may work at the end of May, and this is not about the Deep Packet Inspection (DPI) system — its operator will not install it, does not see ways to monetize it.
The representative of Rostelecom Valery Kostarev confirmed: DPI is not economically feasible, and as for the new filtering system, Kostarev hopes that it will be able to start blocking resources by URL in the 3rd quarter of 2014.
DPI is capable of not only filtering sites, but also detecting and blocking viruses, as well as filtering out information that does not meet specified criteria. Providers use DPI not so much for filtering as for blocking applications like BitTorrent. The solution that Rostelecom is preparing to install is focused only on filtering prohibited resources, knows Irina Levova, an analyst at the Russian Electronic Communications Association. It works like this: if the address of the page that the user enters appears in the black list, then his request is sent to the router. This device recognizes the URL to be blocked and denies access to it. And access to permitted pages on the same IP address remains open.
So what kind of new kind of filtering of the Internet space?
Most likely it will be a method developed earlier by Roskomnadzor together with industry experts and presented in the form of recommendations (.doc, 36Kb) for telecom operators last summer:
“The recommendations were developed taking into account the analysis of law enforcement practice, the results of discussions with representatives of telecom operators, providers hosting and other interested parties held in Roskomnadzor and online discussions organized on the specialized information resource wecantrust.net . ”
What approximately will this be:
A model of "transparent" proxy blocking using the URL:
1 - Traffic for site x, is separated from the rest of the traffic and sent through
blocking proxy server
2 - The usual route for Internet traffic
3 - Transparent proxy server of the Internet service provider that
checks the URL for belonging to the blocked values
4 - No
match, traffic is skipped 5 - URL match, traffic is blocked Vedomosti
cost
:
On the company announced a tender for the development of a filtration solution, Inline Telecom Solutions became the winner . The tender documents indicate the cost of the project - 36.9 million rubles, or just over $ 1 million. The
installation of DPI systems on fixed broadband networks of the federal player scale, the Big Three operators, and Roskomnadzor, were estimated at $ 40-50 million.
Until now, this largest and most important telecom operator has been restricting access to Internet resources by IP address. Moreover, this often happened not only for users of this provider in Russia, but also for customers of those telecom operators in states adjacent to Russia (such as Armenia, Kazakhstan, Uzbekistan, Moldova, Belarus, etc.) who received Internet traffic from Russia on the highway.
According to Vedomosti:
In test mode, a new type of filtering may work at the end of May, and this is not about the Deep Packet Inspection (DPI) system — its operator will not install it, does not see ways to monetize it.
The representative of Rostelecom Valery Kostarev confirmed: DPI is not economically feasible, and as for the new filtering system, Kostarev hopes that it will be able to start blocking resources by URL in the 3rd quarter of 2014.
DPI is capable of not only filtering sites, but also detecting and blocking viruses, as well as filtering out information that does not meet specified criteria. Providers use DPI not so much for filtering as for blocking applications like BitTorrent. The solution that Rostelecom is preparing to install is focused only on filtering prohibited resources, knows Irina Levova, an analyst at the Russian Electronic Communications Association. It works like this: if the address of the page that the user enters appears in the black list, then his request is sent to the router. This device recognizes the URL to be blocked and denies access to it. And access to permitted pages on the same IP address remains open.
So what kind of new kind of filtering of the Internet space?
Most likely it will be a method developed earlier by Roskomnadzor together with industry experts and presented in the form of recommendations (.doc, 36Kb) for telecom operators last summer:
“The recommendations were developed taking into account the analysis of law enforcement practice, the results of discussions with representatives of telecom operators, providers hosting and other interested parties held in Roskomnadzor and online discussions organized on the specialized information resource wecantrust.net . ”
What approximately will this be:
A model of "transparent" proxy blocking using the URL:
1 - Traffic for site x, is separated from the rest of the traffic and sent through
blocking proxy server
2 - The usual route for Internet traffic
3 - Transparent proxy server of the Internet service provider that
checks the URL for belonging to the blocked values
4 - No
match, traffic is skipped 5 - URL match, traffic is blocked Vedomosti
cost
:
On the company announced a tender for the development of a filtration solution, Inline Telecom Solutions became the winner . The tender documents indicate the cost of the project - 36.9 million rubles, or just over $ 1 million. The
installation of DPI systems on fixed broadband networks of the federal player scale, the Big Three operators, and Roskomnadzor, were estimated at $ 40-50 million.