New technologies
Posted: Sun Feb 09, 2025 5:21 am
Roskomnadzor, for its part, has made efforts to try to minimize the damage caused by "thrifty" providers. It excluded from the registry some hosts that were managed by hooligans, created a white list of hosts that cannot be blocked, and temporarily allowed some providers with a "crooked" blocking system not to determine IP addresses from DNS, but to block only by IP from the registry.
To avoid the problem, it is necessary to use a modern method of automatic blocking. Some DPI systems available on the market allow automatic filtering of prohibited sites. If the Internet resource uses the http protocol, then filtering is carried out exclusively by URL, not by IP address. If the connection is encrypted and the https protocol is used, then the resource name is extracted from Server Name Indication (SNI) or Common Name certificates.
According to Kirill Ivanov, head of the unified development department of Orion Telecom LLC, the transfer of the company's infrastructure to the DPI filtering platform made it possible to fully automate the process of blocking prohibited resources, freeing engineers from regularly manually adding and checking the relevance of compliance with the Roskomnadzor list.
For effective and accurate filtering nepal mobile database to Roskomnadzor lists, telecom operators and Internet providers are recommended to purchase a DPI platform that allows for the following:
automatic download of filtering registers of Roskomnadzor and the Ministry of Justice from the cloud service;
filtering by the operator's own list;
filtering URLs with Cyrillic characters;
filtering with a mask in the form “*.domain.com”;
blocking https traffic using Common Name certificates;
support for Server Name Indication (SNI).
To avoid the problem, it is necessary to use a modern method of automatic blocking. Some DPI systems available on the market allow automatic filtering of prohibited sites. If the Internet resource uses the http protocol, then filtering is carried out exclusively by URL, not by IP address. If the connection is encrypted and the https protocol is used, then the resource name is extracted from Server Name Indication (SNI) or Common Name certificates.
According to Kirill Ivanov, head of the unified development department of Orion Telecom LLC, the transfer of the company's infrastructure to the DPI filtering platform made it possible to fully automate the process of blocking prohibited resources, freeing engineers from regularly manually adding and checking the relevance of compliance with the Roskomnadzor list.
For effective and accurate filtering nepal mobile database to Roskomnadzor lists, telecom operators and Internet providers are recommended to purchase a DPI platform that allows for the following:
automatic download of filtering registers of Roskomnadzor and the Ministry of Justice from the cloud service;
filtering by the operator's own list;
filtering URLs with Cyrillic characters;
filtering with a mask in the form “*.domain.com”;
blocking https traffic using Common Name certificates;
support for Server Name Indication (SNI).