🤡 I present to you armchair expertise in the official publication of the Russian Government. I have no other expertise, publications, or Russia for you.
https://rg.ru/2024/05/19/roskomnadzor-uzhestochit-pravila-raboty-internet-provajderov-i-hostingovyh-kompanij.html

- "RG" [er-ge] stands for "Российская Газета" (Rossiyskaya Gazeta), which is the official newspaper of the Russian government.
- NDNS stands for the "National Domain Name System" (НСДИ [en-es-de-eeh]).
- Roskomnadzor is the Russian federal executive body responsible for overseeing and regulating communications, information technology, and mass media. Its role includes monitoring and controlling internet usage, ensuring data privacy, and enforcing laws related to media and telecommunications in Russia.

Roskomnadzor to Tighten Regulations for ISPs and Hosting Companies

Roskomnadzor intends to tighten regulations for Internet Service Providers (ISPs) and hosting companies. The new requirements will address increasing network resilience and the use of the National Domain Name System (NDNS). The document has been published for public discussion.

NDNS is an infrastructure replacing foreign DNS services. It ensures the availability of Russian internet resources in the event of distortion or unavailability of information in the global Domain Name System. The primary function of DNS is to link domain names with the IP addresses of servers where online resources are physically hosted.

According to subparagraph 3 of paragraph 8 of Article 56.2 of the Communications Law, telecom operators, owners, or other holders of technological communication networks with an autonomous system number, as well as hosting providers, are required to use the National Domain Name System.

Amendments to the order approving the provisions of the National Domain Name System were made in response to incidents with DNS servers. One such incident occurred at the end of January this year when part of the internet users could not access websites on .ru domains for several hours. The failure happened on DNS servers managed by the Technical Center of Internet and MSK-IX and was caused by incorrect operation of the DNSSEC service. However, some ISPs did not experience problems.

Currently, connecting to the NDNS is done using one of four DNS server configuration options. Two of these are through authoritative servers of the NDNS root zone. During the January failure, those who connected to the system using these methods experienced issues, according to Roskomnadzor. With these connection methods, user requests are processed by the operators' own servers, and in the event of a failure, they may not always promptly identify issues and take measures to restore resource availability.

"The changes in the order propose excluding these connection methods from the list of options for connecting to the NDNS and instead using more reliable and efficient methods - via NDNS caching servers. Organizations that used these methods during the failure did not experience problems accessing resources. These connection options to the NDNS reduce the risk of resource inaccessibility and reduce the load on the infrastructure of telecom operators, which is especially important for large networks with a significant number of users," Roskomnadzor told "RG".

Such inaccessibility can arise both due to global system failures (as witnessed in 2023-2024) and in case of intentional disconnection of Russia from global DNS servers, says Artem Sychev, advisor to the General Director of Positive Technologies.

"For ordinary users, the measures provided by the document are not noticeable. And in the event of a global DNS system failure, users should not notice it either," Sychev told "RG".

The expert added that the correct implementation should ensure instant and seamless switching to the domestic domain name resolution system, ensuring users' access to all necessary resources and services.

Эшер II

🤡 I present to you armchair expertise in the official publication of the Russian Government. I have no other expertise, publications, or Russia for you.
https://rg.ru/2024/05/19/roskomnadzor-uzhestochit-pravila-raboty-internet-provajderov-i-hostingovyh-kompanij.html

- "RG" [er-ge] stands for "Российская Газета" (Rossiyskaya Gazeta), which is the official newspaper of the Russian government.
- NDNS stands for the "National Domain Name System" (НСДИ [en-es-de-eeh]).
- Roskomnadzor is the Russian federal executive body responsible for overseeing and regulating communications, information technology, and mass media. Its role includes monitoring and controlling internet usage, ensuring data privacy, and enforcing laws related to media and telecommunications in Russia.

Roskomnadzor to Tighten Regulations for ISPs and Hosting Companies

Roskomnadzor intends to tighten regulations for Internet Service Providers (ISPs) and hosting companies. The new requirements will address increasing network resilience and the use of the National Domain Name System (NDNS). The document has been published for public discussion.

NDNS is an infrastructure replacing foreign DNS services. It ensures the availability of Russian internet resources in the event of distortion or unavailability of information in the global Domain Name System. The primary function of DNS is to link domain names with the IP addresses of servers where online resources are physically hosted.

According to subparagraph 3 of paragraph 8 of Article 56.2 of the Communications Law, telecom operators, owners, or other holders of technological communication networks with an autonomous system number, as well as hosting providers, are required to use the National Domain Name System.

Amendments to the order approving the provisions of the National Domain Name System were made in response to incidents with DNS servers. One such incident occurred at the end of January this year when part of the internet users could not access websites on .ru domains for several hours. The failure happened on DNS servers managed by the Technical Center of Internet and MSK-IX and was caused by incorrect operation of the DNSSEC service. However, some ISPs did not experience problems.

Currently, connecting to the NDNS is done using one of four DNS server configuration options. Two of these are through authoritative servers of the NDNS root zone. During the January failure, those who connected to the system using these methods experienced issues, according to Roskomnadzor. With these connection methods, user requests are processed by the operators' own servers, and in the event of a failure, they may not always promptly identify issues and take measures to restore resource availability.

"The changes in the order propose excluding these connection methods from the list of options for connecting to the NDNS and instead using more reliable and efficient methods - via NDNS caching servers. Organizations that used these methods during the failure did not experience problems accessing resources. These connection options to the NDNS reduce the risk of resource inaccessibility and reduce the load on the infrastructure of telecom operators, which is especially important for large networks with a significant number of users," Roskomnadzor told "RG".

Such inaccessibility can arise both due to global system failures (as witnessed in 2023-2024) and in case of intentional disconnection of Russia from global DNS servers, says Artem Sychev, advisor to the General Director of Positive Technologies.

"For ordinary users, the measures provided by the document are not noticeable. And in the event of a global DNS system failure, users should not notice it either," Sychev told "RG".

The expert added that the correct implementation should ensure instant and seamless switching to the domestic domain name resolution system, ensuring users' access to all necessary resources and services.

hottg.com/usher2/3137

8.5K viewsedited  May 19 at 08:29