[members-discuss] Russian government blocked 2mln IPs at 16/04/2018

On 17/04/2018 12:52, Juri wrote:
> Good day everybody!
> 
> Update, currently amount of IPv4 in blocklist is about 4.8 mln
> You can see graphs and live update at  https://2018.schors.spb.ru/

Hey,

Implement IPv6 in the country and lot's of this services might be 
available again ;)

Cheers, Jan

> 
> Telegram messenger keeps working. Telegram added new internal options to
> avoid been blocked and today it works even without proxies.
> Russian government adds more and more IPs to blocklist.
> For example I can open Opera website. I can download Skype because
> download cloud is blocked. A lot of Internet services affected.
> 
> I suggest that in RIPE region should be special commission and it should
> be responsible for investigate of such cases and work on sanctions for
> that. Or they can broke the internet at least.
> 
> p.s. As I mentioned already they wanted already to have ISPs have BGP
> links with authority and accept announces of prefixes they don't like.
> But that's the real attack for whole internet because that's just IP
> hijacking.
> 
> 
> Juri
> 
> 
> 
> On 17.04.2018 2:16, Juri wrote:
>> Good time of day!
>>
>> I want to bring up discussion about situation in Internet inside Russian
>> Federation. I find current situation not good for Internet, not good for
>> RIPE community, for ISPs and for progress itself.
>>
>> Short background.
>>
>> Russian government asked Telegram messenger service (like Viber, Watsup,
>> etc, they can be the next) to give them keys of end-to-end encryption
>> between users. Telegram refused to give it because it stands for
>> freedom, constitution rights of people and telegram says it's not
>> possible to give that keys because they don't have it. At least at
>> Friday 13 of April 2018 they blocked websites of Telegram and at Monday
>> 16 they blocked all technical networks of Telegram inside Russian
>> Federation.
>>
>> This Monday was really nice and fun day when users of the Telegram, the
>> most popular messenger application in Russia, started to add VPN/Socks
>> settings to unblock telegram. Telegram users are good in IT and a lot of
>> people keep telegram online and use it.
>>
>> What did Russian government (who keeps using Telegram messenger as well)
>> started to do? Yes, They started to block VPN services that gives free
>> socks5 proxies and VPNs for telegram users. A lot of such services were
>> based on Amazon Cloud. So, at the evening RKN (aka Roskonadzor, advisory
>> of telecom) started to add IPv4 networks in Russian blocklist (= blackhole).
>>
>> Example of networks that were added to Russian blocklist/blackhole
>>
>> Amazone
>>      <ipSubnet ts="2018-04-16T17:35:00+03:00">52.58.0.0/15</ipSubnet>
>>      <ipSubnet ts="2018-04-16T17:47:00+03:00">18.196.0.0/15</ipSubnet>
>>      <ipSubnet ts="2018-04-16T17:47:00+03:00">18.194.0.0/15</ipSubnet>
>>      <ipSubnet ts="2018-04-16T19:57:00+03:00">18.184.0.0/15</ipSubnet>
>>      <ipSubnet ts="2018-04-16T17:47:00+03:00">35.156.0.0/14</ipSubnet>
>>
>> GOOGLE CLOUD
>>      <ipSubnet ts="2018-04-16T20:21:00+03:00">35.192.0.0/12</ipSubnet>
>>
>> A lot of businesses were affected even some bank companies, processing
>> and others who where using Amazon services. Amount of small companies
>> affected is very large. Big companies? Apple services were affected too
>> as I found. A lot of application use Amazon cloud.
>>
>> Just for info. Some time ago Russian gov wanted to integrate blackhole
>> based on BGP (and that's bring up the question about whole internet
>> stability). Because they break local internet time to time.
>>
>> You can track amount of IPs in blocklist monitoring at
>> https://2018.schors.spb.ru/
>> A lot of news web sites write about this situation.
>>
>> Сonclusion.
>>
>> I don't find this situation suitable for any country. I know and fully
>> understand that it's not easy to find consensus in discussions of such
>> things. But I wish and I want community think about such issues.
>> They should not happen in any country.
>>
>> We are as RIPE community are responsible for Internet stability and
>> safety and making this Internet better.
>>
>> I want RIPE community offer how we should protect normal internet users
>> of all countries from unintelligent, irrational and very bad behavior of
>> local authorities. I think it's not good idea to assign any IPs for such
>> authorities.
>>
>> Consensus should be found.
>>
> 
> 


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3976 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://www.ripe.net/ripe/mail/archives/members-discuss/attachments/20180418/444c9fb9/attachment.p7s>