Kuvharisa kupinda kwemapeji ekuparadzira zvinorambidzwa kunoshanda sei (ikozvino RKN inotarisawo injini dzekutsvaga)

Tisati taenda kune tsananguro yehurongwa hune basa rekusefa kuwana nevashandisi venhare, tinoona kuti ikozvino Roskomnadzor ichadzorawo kushanda kweinjini dzekutsvaga.

Pakutanga kwegore, nzira yekudzora uye rondedzero yezviyero zvakabvumidzwa kuti ive nechokwadi chekuti vashandisi veinjini dzekutsvaga vanotevedzera zvinodiwa kuti varege kuburitsa ruzivo nezveInternet zviwanikwa, kuwana kune inogumira munharaunda yeRussian Federation.

Kurongeka kunowirirana Roskomnadzor yaNovember 7, 2017 No. 229 yakanyoreswa neHurumende yeRuramisiro yeRussia.

Kurongeka kwakagamuchirwa sechikamu chekushandiswa kwezvisungo zveChikamu 15.8 cheFederal Law yeChikunguru 27.07.2006, 149 No. mabasa evaridzi veVPN masevhisi, "anonymizers" uye yekutsvaga injini vashandisi kudzikamisa kuwana ruzivo, kugoverwa kwayo kunorambidzwa muRussia.

Kudzora zviitiko kunoitwa panzvimbo yekutonga muviri pasina kudyidzana nevanoshandisa injini yekutsvaga.

Iyo yeruzivo system inonzwisiswa seFSIS yeruzivo zviwanikwa zveruzivo uye telecommunication network, kuwana kune inogumira.

Zvichienderana nemhedzisiro yechiitiko, mushumo unodhirowewa, unoratidza, kunyanya, ruzivo nezve software yakashandiswa kusimbisa izvi chokwadi, pamwe neruzivo rwunosimbisa kuti chaiyo peji (mapeji) yesaiti panguva yekutonga. yakanga iri muhurongwa hwemashoko kwerinopfuura zuva.

Chiito chacho chinotumirwa kune injini yekutsvaga kuburikidza nehurongwa hwemashoko. Muchiitiko chekusabvumirana nechiito, mufambisi ane kodzero yekuendesa zvipikiso zvake kuRoskomnadzor mukati memazuva matatu ekushanda, iyo inofunga nezvekupikisa zvakare mukati memazuva matatu ekushanda. Zvichienderana nemhedzisiro yekutariswa kwezvinopokana nemushandisi, mukuru wedare rinodzora kana mutevedzeri wake anosarudza kutanga nyaya yemhosva yekutonga.

Maitiro ekusefa sisitimu yevashandisi venharembozha yakarongeka parizvino

MuRussia kune akati wandei mitemo inosungira telecom operators kusefa kupinda kwemapeji anogovera zvinorambidzwa:

• Federal Law 126 "Pane Kukurukurirana", kugadziriswa kweArt. 46 - pane chisungo chemushandisi kudzikamisa kuwana ruzivo (FSEM).
• "Unified Register" - Chirevo cheHurumende yeRussian Federation chaGumiguru 26, 2012 N 1101 "Pane yakabatana automated information system" Rejista yakabatana yemazita emazita, indexes emapeji esaiti mune ruzivo uye telecommunication network "Internet" uye network kero. iyo inobvumira kuzivisa nzvimbo mune ruzivo uye telecommunication network Internet network ine ruzivo kuparadzirwa kwayo kunorambidzwa muRussian Federation"
• Federal Law 436 "Pane Kudzivirirwa Kwevana ...", categorization yeruzivo rwuripo.
• Federal Law No. 3 "Pamapurisa", Chinyorwa 13, ndima 12 - pamusoro pekubvisa zvikonzero uye mamiriro ezvinhu anobatsira pakuitwa kwekutyisidzira kuchengetedzwa kwevagari uye kuchengetedzwa kwevanhu.
• Federal Law No. 187 "Pakugadziriswa kwemamwe mabasa emitemo yeRussian Federation pamusoro pekuchengetedzwa kwekodzero dzepfungwa mumashoko uye telecommunication network" ("anti-piracy law").
• Kutevedza mitongo yematare uye mirairo yevachuchisi.
• Federal Law yaChikunguru 28.07.2012, 139 N XNUMX-FZ "Pakugadziriswa kuMutemo weFederal "Pakuchengetedzwa kweVana kubva kuRuzivo Runokuvadza Kuhutano Hwavo uye Kubudirira" uye mamwe maitiro emutemo weRussian Federation.
• Federal Law yaChikunguru 27, 2006 Nha.

Zvikumbiro kubva kuRoskomnadzor zvekuvharisa zvine rondedzero yakagadziridzwa yezvinodiwa kune mupi, imwe neimwe yekupinda kubva kuchikumbiro chakadaro ine:

• rudzi rwerejista maererano nekurambidzwa kunoitwa;
• iyo poindi panguva iyo kudikanwa kwekurambidza kupinda kunomuka;
• rudzi rwekukurumidzira kwekupindura (kazhinji kukurumidza - mukati maawa makumi maviri nemana, kukurumidza kukuru - pakarepo mhinduro);
• rudzi rwe registry yekupinda ichivharira (ne URL kana nezita rezita);
• hash kodhi yekunyoresa registry (inochinja pese kana zviri mukati mekupinda zvachinja);
• ruzivo rwechisarudzo pamusoro pekudiwa kwekudzivirira kupinda;
• imwe kana akawanda indexes emapeji esaiti, kuwana kunofanira kuganhurirwa (kusarudza);
• rimwe kana akawanda mazita emudunhu (optional);
• kero imwe kana kupfuura network (optional);
• imwe kana akawanda IP subnets (optional).

Kuti utaure zvinobudirira ruzivo kune vashandisi, iyo "Information system yekudyidzana pakati peRoskomnadzor uye telecom operators" yakagadzirwa. Iyo inowanikwa pamwe nemirairo, mirairo uye zviyeuchidzo zvevashandisi pane yakasarudzika portal:

vigruzki.rkn.gov.ru

Kune chikamu chayo, kuitira kutarisa telecom operators, Roskomnadzor yakatanga kubudisa mutengi kune AS "Revizor". Pazasi pane zvishoma nezve mashandiro emumiririri.

Algorithm yekutarisa kuwanikwa kweURL yega yega neAgent. Paunenge uchitarisa, Mumiririri anofanira:

• sarudza iyo IP kero uko zita retiweki resaiti iri kuongororwa (domain) rinoshandurwa kana kushandisa IP kero dzakapihwa mukurodha;
• Kune yega yega IP kero inotambirwa kubva kuDNS maseva, ita chikumbiro cheHTTP cheiyo URL iri kuongororwa. Kana iyo HTTP redirect ikagamuchirwa kubva kune saiti iri kutariswa, Mumiriri anofanira kutarisa iyo URL kwainotungamirwa. Angangoita mashanu anoteedzana HTTP redirects anotsigirwa;
• kana zvisingakwanisi kuita chikumbiro cheHTTP (kubatana kweTCP hakuna kusimbiswa), Mumiririri anofanira kugumisa kuti iyo yose IP kero yakavharwa;
• kana ikabudirira chikumbiro cheHTTP, Mumiririri anofanira kutarisa mhinduro yakagamuchirwa kubva kune saiti iri kuongororwa neHTTP mhinduro kodhi, HTTP misoro, uye HTTP yemukati (yekutanga yakagamuchirwa data kusvika ku10 kb muhukuru). Kana iyo yakagamuchirwa mhinduro inoenderana neiyo stub peji matemplate akagadzirwa munzvimbo yekutonga zvinofanirwa kugumiswa kuti URL iri kutariswa yakavharwa;
• kana uchitarisa URL, Mumiriri anofanira kutarisa kuisirwa kwekubatanidza kwakavharidzirwa uye kumaka iyo sosi;
• Kana iyo data yakagamuchirwa neAgent isingaenderane nematemplate emapeji e stub kana mapeji akavimbika ekudzokorodza anozivisa nezve kuvharika kwechishandiso, Mumiririri anofanira kugumisa kuti URL haina kuvharwa paSPD yetelecom operator. Muchiitiko ichi, ruzivo nezve data (HTTP mhinduro) yakagamuchirwa neAgent inonyorwa mumushumo (audit log file). Iyo system administrator ine kugona kugadzira template kune nyowani stub peji kubva pane ino rekodhi kudzivirira inotevera nhema mhedziso nezvekusavapo kwe block.

Rondedzero yezvinofanira kupihwa neAgent

• kubata nzvimbo yekutonga kuti uwane runyorwa rwakakwana rwemaURL uye mavhavha modes anoda kuongororwa;
• kutaurirana neiyo control centre kuti uwane data pane yekuyedza modes. Maitiro anotsigirwa: cheki yakazara-nguva, yakazara nguva nenguva yakatarwa, inosarudza imwe-nguva ine mushandisi-inotsanangurwa runyorwa rwema URL, tarisa nguva nenguva yakatarwa yerunyorwa rwe URL (yerumwe rudzi rweEP rekodhi);
• kuenderera mberi kwekuita kweakatsanangurwa maitiro ekusimbisa uchishandisa iyo iripo URL rondedzero, kana zvisingaite kuwana runyoro rwema URL kubva kunzvimbo yekudzora, uye kuchengetwa kweakawanikwa mhinduro dzebvunzo nekuzoendesa kune iyo control centre;
• Kuitwa kwakazara kwematanho ekusimbisa maitiro uchishandisa anowanikwa ma URL rondedzero, kana zvisingaite kuwana ruzivo nezve maratidziro modes kubva kunzvimbo yekudzora, uye kuchengetwa kweiyo yakawanikwa bvunzo mhinduro nekuzoendesa kunzvimbo yekudzora;
• kutarisa mhedzisiro yekuvharira zvinoenderana neyakagadzika modhi;
• kutumira mushumo pamusoro pekuongororwa kwakaitwa kunzvimbo yekudzora (yekuongorora log file);
• kugona kutarisa kushanda kweiyo telecom operator's SPD, i.e. kutarisa kuwanikwa kwerondedzero yenzvimbo dzinozivikanwa dzinosvikika;
• kugona kutarisa kuvharira mhinduro uchishandisa proxy server;
• mukana wekuvandudza software iri kure;
• kugona kuita maitiro ekuongorora paSPD (nguva yekupindura, packet nzira, kukurumidza kurodha mafaera kubva kune yekunze sosi, kutsunga kweIP kero yemazita emazita, kukurumidza kwekugamuchira ruzivo mune reverse yekutaurirana chiteshi mune wired network network, packet. kurasikirwa kwehuwandu, avhareji kutapurirana kunonoka nguva mapakeji);
• kuongorora kushanda kweanosvika gumi URLs pasekondi, chero paine yakakwana yekutaurirana chiteshi bandwidth;
• kugona kwemumiriri kuwana iyo sosi kakawanda (kusvika ku20 nguva), ine inosiyana frequency kubva 1 nguva pasekondi kusvika 1 nguva paminiti;
• kugona kugadzira kurongeka kwakarongeka kwezvinyorwa zvinotumirwa kuti zviongororwe uye kuseta zvakakosha kune yakatarwa peji resaiti paInternet.

Kazhinji, chimiro chinoratidzika seizvi:

Software uye hardware-software mhinduro dzekusefa Internet traffic (DPI mhinduro) inobvumira vashandisi kuvhara traffic kubva kune vashandisi kuenda kune masaiti kubva kuRKN runyorwa. Kunyangwe ivo vakavharwa kana kwete zvinotariswa neAS Auditor mutengi. Anotarisa otomatiki kuwanikwa kwesaiti yacho achishandisa runyoro kubva kuRKN.

Sample monitoring protocol iripo batanidzo.

Gore rapfuura, Roskomnadzor yakatanga kuyedza kuvharira mhinduro dzinogona kushandiswa nemushandi kuita chirongwa ichi nemushandisi. Rega nditore kubva pane zvakabuda mukuyedzwa kwakadaro:

“Specialized software solutions “UBIC”, “EcoFilter”, “SKAT DPI”, “Tixen-Blocking”, “SkyDNS Zapret ISP” uye “Carbon Reductor DPI” yakagamuchira mhedziso dzakanaka kubva kuRoskomnadzor.

Mhedziso kubva kuRoskomnadzor yakagamuchirwa zvakare ichisimbisa mukana wevashandisi venhare vachishandisa software yeZapretService senzira yekurambidza kupinda kwezvinhu zvinorambidzwa paInternet. Mhedzisiro yekuyedzwa yakaratidza kuti kana yaiswa zvinoenderana neyakakurudzirwa yekubatanidza chirongwa chemugadziri "mugap" uye nekumisikidza nemazvo network yenharembozha, huwandu hwekutyorwa kwakaonekwa maererano neUnified Register yeRuzivo Rwakarambidzwa haipfuure 0,02%.

Saka, vafambisi venhare vanopihwa mukana wekusarudza mhinduro yakakodzera kwazvo yekudzikamisa kupinda kune zvakarambidzwa zviwanikwa, kusanganisira kubva pane rondedzero yezvigadzirwa zvesoftware zvakagamuchira maonero akanaka kubva kuRoskomnadzor.

Nekudaro, panguva yekuyedzwa kweIdecoSelecta ISP software chigadzirwa, nekuda kwekurebesa maitiro ekuiswa kwayo uye kumisikidzwa, vamwe vashandisi havana kukwanisa kutanga kuyedza nenguva. Kweanopfuura hafu yevafambisi venhare vari kutora chikamu mukuyedzwa, nguva yekuedza kushanda kweIdeco Selecta ISP haina kupfuura vhiki. Tichifunga nezvehuwandu hudiki hwehuwandu hwehuwandu hwakawanikwa uye hushoma hwevatori vechikamu mukuyedzwa, Roskomnadzor mumhedziso yayo yepamutemo yakaratidza kusagoneka kwekuwana mhedziso dzisina kujeka pamusoro pekubudirira kwechigadzirwa cheIdeco Selecta ISP senzira yekudzikamisa kuwana zviwanikwa zvinorambidzwa paInternet. ”

Rega ndiwedzere kuti vanosvika makumi maviri nevanomwe venharembozha vane nhamba dzakasiyana dzevanyoreri kubva kumatunhu akasiyana emubatanidzwa weRussian Federation vakatora chikamu mukuyedza chigadzirwa chega chega.

Mhedziso yepamutemo yakavakirwa pabvunzo mhinduro inogona kuwanikwa pano. Mhedziso idzi dzine ruzivo rwekuti zero. Unogona kuverenga nezve chigadzirwa "Ideco Selecta ISP" kuti uzive zvekusaita.

Gore rino kuedza kuchaenderera mberi uye panguva ino, kutonga nemashoko kubva kuRoskomnadzor, chimwe chigadzirwa chakatotorwa uye 2 zvimwe zviri munguva yemberi iri pedyo.

Ko kana blocking yakaitika nekukanganisa?

Mukupedzisa, ndinoda kukuyeuchidza kuti Roskomnadzor "haiti kukanganisa," iyo inosimbiswa neDare reBumbiro reMitemo.

Chisarudzo, icho chinonyatso kusunungura Roskomnadzor mutoro wekuvhara nzvimbo zvisiri izvo, yakagamuchirwa sechikamu chekufungisisa kwekunyunyuta kuDare reBumbiro reMitemo nemukuru weInternet Publishers Association, Vladimir Kharitonov. Yakati muna Zvita 2012, Roskomnadzor akavharisa zvisizvo raibhurari yake yepamhepo digital-books.ru. Sezvo Mr. Kharitonov akatsanangura, pfuma yake yakanga iri pane imwecheteyo IP kero seyo portal rastamantales(.)ru (ikozvino rastamantales(.)com), icho chaiva chinhu chekutanga chekuvhara. Vladimir Kharitonov akaedza kukwidza mutongo weRoskomnadzor mudare, asi muna June 2013 Dare reTagansky District rakaona kuvharwa kwepamutemo, uye munaSeptember 2013 chisarudzo ichi chakatsigirwa neMoscow City Court.

Kubva ipapo:

Roskomnadzor vakaudza Kommersant kuti vagutsikana nemutongo wakapihwa nedare reConstitutional Court. “Dare reConstitutional Court rakasimbisa kuti Roskomnadzor iri kuita mutemo. Kana mushandisi asina tekinoroji yekubvumidza kupinda kune imwe peji resaiti, uye kwete kunetiweki kero, saka iri ibasa remushandisi, "munyori wezvenhau wedhipatimendi akaudza Kommersant.

Iyi nyaya yakakoshawo kune vanopa makore uye makambani anotambira, sezvo zviitiko zvakafanana zvakaitika kwavari. Muna Chikumi 2016, iyo Amazon S3 gore sevhisi yakavharwa muRussia, kunyangwe iyo chete 888poker poker kamuri peji iri papuratifomu yayo yakaverengerwa murejista pakukumbira kweFederal Tax Service. Kuvharirwa kweiyo yese sosi kwakakonzerwa chaizvo nekuti Amazon S3 inoshandisa yakachengeteka https protocol, isingatenderi kuvhara mapeji ega. Chete mushure mekunge Amazon pachayo yadzima peji iyo zviremera zveRussia zvaive zvichemo ndiyo yakabviswa murejista.

Source: www.habr.com