How does blocking sites from the RKN registry work on the side of providers?

Question

Computer networks

Hello.

What program do ISPs use to apply the page/domain/IP blocking condition from the RKN registry?
Is it an open/paid solution? Or does everyone have their own solutions to parse the entire registry?

I'm interested in this moment:

In the registry page - https://example.com/page.xhtml
The page has an IP address - 222.222.222.222
It 's clear how the IP is received.

In the domain registry - example.com
The domain has an IP address - 222.222.222.222
It 's clear how the IP is received.

In the domain registry - *.example.com
The domain has an IP address - 222.222.222.222
It is NOT clear how the IP was received.

Is a request made to example.com or foo.example.com/bar.example.com to get an IP?

Answer 1

Look for DPI systems, usually this is an option for ISP hardware. A list of rules is formed live and loaded via tftp to the router. However, there are a lot of options. For example, Cisco took snort and finished it for themselves, you can create a rule to block pages with the number 42 on Thursdays at 5 o'clock.

Answer 2

Solutions are different, for example, in the form of a dedicated server with special software that deals with filtering. The lists from the RKN come automatically and the provider does not participate in their formation. Actually, the server generally works extremely autonomously once configured, the provider only ensures its performance, otherwise you can fly into a fine, because. quality control of locks is carried out by a mandatory piece of hardware provided by the RKN, which, in fact, is an ordinary router with special firmware.