D
D
Danich Fedorovich2016-01-23 22:09:26
linux
Danich Fedorovich, 2016-01-23 22:09:26

Is it possible to disguise foreign hosting as Russian?

I welcome everyone.
A directive came to transfer data from a foreign hosting to a Russian one. But since foreign hosting suits me more than in all respects and I have no desire to transfer, the idea arose to register a VPS in the Russian segment and redirect requests from it to the desired foreign server. Interested primarily in HTTP. Will it be enough for the target domains to register an A-record on a Russian host and register on it:
iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination XXXX:80
iptables -t nat -A POSTROUTING -j MASQUERADE
What is not taken into account, what are the pitfalls and how to do it right?

Answer the question

In order to leave comments, you need to log in

5 answer(s)
V
Victor Taran, 2016-01-25
@shambler81

nginx frontend you have in russia
apache backend in anywhere... ;)
ping will be given And the record of your server in russia, in fact, you won't have to spend much money for this, any vps will do.

M
Mystray, 2016-01-24
@Mystray

This solution has its downsides. For example, in the logs of a remote server, all requests will be from the IP of the intermediate server, instead of the real client. Maybe it's better to put a reverse proxy and use it to break into the remote one? It will solve the problem by substituting additional headers.
The second problem: if they want to dig, they may well find a real location (for example, if the server can initiate connections by downloading files from a link, or sending mail directly), or a banal trace. In this option, the solution is only VPN to a remote host and wrapping all traffic through VPN.

D
Dimonchik, 2016-01-23
@dimonchik2013

it is not known how they will check
for the time being - it is possible and so, but what if they require a physical server or, for example, an agreement with a certified DC?

C
CityCat4, 2016-01-24
@CityCat4

The verification method was not taken into account. Who will check, how, for what purpose. If, as we say in Kazakhstan, there are rules for the .kz zone that all sites must be on Kazakh servers, but for a redirect, it is enough to put one page there, then this option will do, and even a simpler one. If, in order to implement the new requirements that the database should be stored on Russian servers, then you can still fall under the distribution, because:
- they may require an agreement or credentials on the server
- this may be a violation of the law

S
spotifi, 2016-05-13
@spotifi

It will slow down. Yes, and pay for 2 hosting at once....
With the increase in the dollar, our hosting became quite competitive.
The only problem is personal data.
If the site logic is divided so that personal data is stored only in the Russian Federation, then there is no problem storing everything else abroad.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question