Is it Possible to Disconnect a Country from the Internet?
April 02, 2019

Archana Kesavan
ThousandEyes

Share this

The world may soon see something unprecedented when it comes to our interconnected, Internet-driven daily life. One country, Russia, will attempt to "turn off" its Internet, scheduled to happen in the very near future.

For context, last December, the Russian parliament passed a law which it said was aimed at ensuring the independence of the Russian Internet (Runet), and reportedly are planning an experiment to disconnect the country from the global Internet at some point before the 1st of April. It is still not clear if this will happen, but the goal is to test the feasibility of such an operation and suggest potential policy ramifications to the country's authorities.

The Reasons Behind Russia's Concerns

Of course, the Internet is one of the most important inventions of the 20th century, allowing people from all over the world to freely share information and knowledge. However, the Internet has roots in the US government, and as a result, many critical resources that power the Internet, as we know it, are controlled by US-based organizations and are subject to US jurisdiction. Among these are some of the world's largest DNS providers, ISPs and public cloud providers. Furthermore, all social media platforms and a majority of the biggest technology companies including Apple, Microsoft and Amazon, are headquartered in the US. This is a big concern for Russian authorities, but it's not clear if they view it as a strategic weakness or if they're aiming to contain the economic powers of US tech giants within the Russian digital economy.

Key Challenges and Possible Scenarios

Disconnecting a country from the Internet is not easy, as the seamless operation of the Internet around the world is ensured by complex IT structures and also governance. One of its most critical parts is the Domain Name System (DNS).

DNS is a highly-important global service provided by hundreds of companies around the world. Still, while every country has multiple domain registrants, they all mirror a common global database that establishes the directory of the Internet. If Russia isolates itself from the Internet, it will need to replicate the whole system within the boundaries of the country. Unconfirmed reports previously stated that Russia was developing a plan for a backup DNS system since 2014, which makes this part of the experiment partly feasible.

Also, an important point to make is that there are multiple points of interconnection between Russian Internet Service Providers (ISPs) and ISPs around the globe. On some occasions the interconnections have peering relationships, meaning traffic is going through Russia to other countries, while part of traffic remains in the country.

In order to actually turn off the Internet in the country, there are two approaches available to Russia.

Firstly, it would have to switch off all Internet circuits going in and out of the country. This seems like the most rational option, however, it will require coordinating major changes across every ISP in Russia. If not performed correctly, the Internet will divert traffic to the circuits that failed to switch off, overloading those paths and the ISPs altogether.

The second approach would be filtering the Border Gateway Protocol (BGP) route announcements whether they're accepted or not by Russian ISPs. This would create a fragmented view of the Internet, allowing traffic to continue flowing to other countries through Russia. However, this is a high-risk scenario as BGB changes are difficult to coordinate, and one misconfiguration can ruin the whole system. Contractual agreements require ISPs to interconnect certain locations around the world, and violation can lead to suspension, expanding Internet outages beyond Russia's borders.

Finally, one of the biggest issues is the global software ecosystem, which is now primarily hosted in the cloud. Besides consumer-oriented services such as Google and Facebook, public cloud also hosts enterprise applications such as Office 365 and Salesforce. All of these services rely on an extremely complex mixture of back-end services that are almost impossible to entirely localize. In 2015, when Russian authorities passed a law requiring SaaS providers to keep data of Russian citizens inside the country, only a few companies complied with the regulation, despite this, the government took no action for those who didn't provide this information.

Is Full Internet Isolation Really Possible?

The simple fact is that Russia is heavily integrated into the global Internet ecosystem. Critical components of the Russian economy, from financial services to SaaS applications are relying on interconnections outside of Russia and disconnecting them will have a serious economic impact.

While replicating critical services such as DNS may be an achievable task, recreating public cloud and SaaS services in the country is nearly impossible, as this would require close cooperation with hundreds of companies - from tech giants to startups. Interrupting all transit and peering relationships between ISPs would require enormous coordination, however, it won't guarantee isolation from the global Internet, as Russian users still will be able to find gateways via mobile hotspots with help from international roaming agreements.

China has successfully isolated itself from the global internet a long time ago, however, two key factors made the situation completely different from a possible Russian scenario. Firstly, two state-run monopolies control all telecommunications within China. When Chinese authorities decided to censor the Internet, the state-run telecom companies compiled by building the largest traffic filtering infrastructure on the planet.

Secondly, the policy was created in the early days of the Internet, allowing the country's own Internet ecosystem to grow organically. Russia's Internet was integrated with the global Internet from the beginning, and with the complexity of this integration - it will be very difficult, if not impossible to separate.

With the great disconnect due to take place soon, it will be interesting to see how successful this unprecedented experiment goes for the Russian state, and if other countries may follow suit.

Archana Kesavan is Sr. Network Analyst at ThousandEyes
Share this

The Latest

February 13, 2020

Over the last few decades, IT departments have decreased budgets in part because of recession. As a result, they have are being asked to do more with less. The increase in work has amplified the need for automation ...

February 12, 2020

Many variables must align for optimum APM, and security is certainly among them. I offer the following APM predictions for 2020, which revolve around the reality that we will definitely begin to see much deeper integration of WAN technology on the security front. Look for this integration to take shape in the following ways ...

February 11, 2020

When it comes to growing a successful company, research shows it isn't about getting the most out of employees, but delivering an experience that empowers them to be and do their best. And according to Priming a New Era of Digital Wellness, a new study conducted by Quartz Insights in partnership with Citrix Systems, technology is the secret to doing so ...

February 10, 2020

Only 11% of website decision-makers feel that they have complete insight into the scripts that they use on their websites. However, industry estimates state that about 70% of the code on a website comes from a third-party library or service. Research highlights a clear need to raise awareness of the potential threats associated with the vulnerabilities inherent in third-party code ...

February 06, 2020

The ever-increasing access and speeds offered by today's modern networks offer many advantages to businesses and consumers, but also make the integrity of their performance and security more paramount than ever before. Organizations are struggling to manage the constant fluctuations in network conditions and security threats. This has prompted many to explore how automation can help to streamline network management and security processes ...