Can the authorities limit the Internet for Russians to a pool of only allowed IP addresses? Can the US authorities block access from such a pool?

Question

Computer networks

Now there is a wave of blocking, and as you know, the sled needs to be prepared in the summer :)

What is the worst theoretically possible scenario for the development of the situation? Specialists who fumbles well in networks, tell me please?

That is, look: let's say I raise OpenVPN on a bourgeois server (I need access to the global network in any way for work) - can ISPs block access to the IP of such a server? In theory, yes they can. And I will have to look for another server.

And what might this situation look like in its maximum development? Can all Internet providers and all Russian data centers be transferred to work exclusively with a permitted pool of IP addresses?

This is the first question.

And, the second question: can the US, for its part, already block access from the addresses of the Russian pool? Well, it's just easier with this - you can proxy from some thread of Caribbean addresses or something like that :) The main question is the first one.

And please answer in a purely technical format. Those. what can or can't they do at the firewall level of the "sovereign internet"?

And the last thing: if the answer to the first question is yes, then how to get around it?

Thank you.

Answer 1

Technically they can. It's not even a very difficult task. Everything was invented a long time ago: https://ru.wikipedia.org/wiki/Internet_in_DPRK
https://habr.com/ru/company/ruvds/blog/648399/

And yes, you used the term "Kwangmyeong" ... the fact is that in the North this word is practically not used in practice. A North Korean at the mention of "Bright Light" most likely will not even understand what it is about. The main intranet of the DPRK is referred to as the "National Computer Network", a long compound word. More often they just say "computer network".

Can the US, for its part, already block access from the addresses of the Russian pool?

Then we will be able to conditionally access them via a Chinese VPN, as if from Chinese addresses, or they will have to immediately block China, Venezuela, India, Armenia, Kazakhstan, Cuba, .. plus negotiate with everyone else who is not on this list so that they also block the entire list of countries supporting Russia.
In short, it is not easy to fence oneself off from the inside, but very easy. To fence off someone outside means to divide the whole world into two camps (those who are "for" and those who are "against"), the camps will be isolated from each other, and within each camp there will be "peace - friendship - chewing gum" .
If you do not require complete insulation from the outside, then doing small dirty tricks on the outside is easy enough. After all, with the massive use of VPN speeds can drop very much (at times, tens, hundreds, thousands of times).

how to bypass it?

With complete isolation (and if it is implemented correctly, without errors), there is no way. But I think that the probability of such a scenario is still small (1% in the next year). Minor dirty tricks - yes, they will, and there are already now.

Answer 2

In theory, yes - ours can block any requests to IP addresses not from the Russian Federation, by subnets
Well, the United States is the same - allow incoming from all subnets except the Russian Federation
. Perhaps NODA TOR can help here .... but this is not accurate

Answer 3

Can all Internet providers and all Russian data centers be transferred to work exclusively with a permitted pool of IP addresses?

Not only can, but they will certainly do so, and most likely quite soon, as soon as a massive wave of building personal VPNs in DCs over the hill begins.

if the answer to the first question is yes, then how to get around it?

No way. We are not following the Chinese version, but the North Korean one - strict isolation of the "red segment" with a white list for exit.