wkrp
commented
2 years ago There was an apparent temporary block of Google and Cloudflare DNS servers on 2021-09-08 from 18:00 to 19:00 (21:00 to 22:00 Moscow Time) in some Russian ISPs.
https://vc.ru/tech/291648-it-specialisty-zayavili-o-testirovanii-roskomnadzorom-massovoy-blokirovki-publichnyh-dns-servisov-google-i-cloudflare (archive)
ИТ-специалист команды Алексея Навального Артём Ионов рассказал, что блокировка производилась 8 сентября с 21:00 до 22:00 на нескольких крупных провайдерах с использованием технических средств противодействия угрозам (ТСПУ) — их операторы должны устанавливать по закону об «суверенном рунете».
О частичной блокировке DNS-сервисов Google и Cloudflare также сообщил своём Telegram-канале эксперт «Общества защиты интернета» Михаил Климарёв. Он отметил, что полностью был заблокирован и VPN-протокол WireGuard.
Artyom Ionov, an IT specialist for Alexei Navalny's team, said that the blocking was carried out on September 8 from 9:00 to 10:00 p.m. on several major providers using technical means of countering threats (TSPU) - operators must install them under the law on "sovereign runet".
The partial blocking of Google and Cloudflare DNS services was also reported on his Telegram channel by Mikhail Klimarev, an expert of the Internet Defense Society Mikhail Klimarev. He noted that the WireGuard VPN protocol was also completely blocked.
From what I can gather, the immediate cause of these blocks and threatened blocks of DNS may be a specific Smart Voting (Умное голосование) app and the legislative elections that will happen this weekend. According to discussion on NTC, the app hardcoded Google, Cloudflare, and OpenDNS DNS resolvers, which would explain why those specific resolvers are targeted, and not others. It is reported by TASS that Roskomnadzor wrote letters to foreign technology companies and DNS providers, naming Google, Cloudflare, and Cisco specifically, and warning not to permit access to the Smart Voting app and web site.
https://tass.ru/obschestvo/12345663 (archive)
"Роскомнадзор и Центр мониторинга управления сетями связи общего пользования РФ (ЦМУ ССОП РФ) на основании требований Центральной избирательной комиссии и Генеральной прокуратуры России направили в адрес ряда иностранных компаний, в том числе провайдерам DNS- и CDN-сервисов, письма с требованиями прекратить предоставление возможностей для обхода ограничения доступа к приложению и сайту "Умное голосование" на территории Российской Федерации", - сказали в пресс-службе.
...
Кроме того, Роскомнадзором и ЦМУ ССОП РФ установлено, что средства обхода блокировок предоставляют более 10 иностранных провайдеров, расположенных на территории США, Украины, Германии, Франции, Японии, Великобритании и других государств. Законные требования о недопустимости предоставления технических средств для обхода ограничения доступа игнорируются магазинами приложений компаний Apple и Google, DNS- и CDN-сервисами Google, Cisco, Cloudflare и ряда других компаний. Для пресечения распространения средств незаконной агитации, а также исключения возможности иностранного вмешательства в любых формах в избирательную кампанию доступ к упомянутым ресурсам должен быть ограничен, подчеркнули в РКН.
"Roskomnadzor and the Public Communications Network Management Monitoring Center of the Russian Federation (CMU SSOP RF) have sent letters to a number of foreign companies, including providers of DNS and CDN services, with demands to stop providing opportunities to circumvent access restrictions to the "Smart Voting" app and website in the Russian Federation," the press-service said.
...
In addition, Roskomnadzor and the CMU SSOP RF found that more than 10 foreign providers located in the United States, Ukraine, Germany, France, Japan, the United Kingdom and other countries provide blocking circumvention tools. Legal requirements regarding the inadmissibility of providing technical means to bypass access restrictions are ignored by Apple and Google app stores, DNS and CDN services of Google, Cisco, Cloudflare and a number of other companies. In order to prevent the spread of means of illegal campaigning, as well as to exclude the possibility of foreign interference in any form in the election campaign, access to the above-mentioned resources should be limited, the RKN stressed.
gfw-report
ValdikSS
This is a summary of information from an NTC thread, which was originally about the reported blocking of https://dns.google/, but which grew in scope as additional information became available.
Блокировка DoH сервера dns.google / Block of the dns.google DoH server
As far as I can tell, the email screenshots come from a post on Telegram: https://t.me/usher2/2106 https://t.me/usher2/2106?comment=9195. I don't really know how to use Telegram (it would be helpful if someone more adept can explore the channel and see if there is more information there), but I found an online viewer (archive) that shows the text of the main post:
Here are the screenshots themselves, followed by transcriptions and translations into English. Note that there must be more than one version of this email, since the overlapping parts of these pictures do not match exactly.