(lived in Russia until 2021, not authorative source of info)
All ISP providers are required to have black boxes installed on-site. These boxes can do traffic shaping (e.g. Twitter is degraded) and basic filtering based on IP addresses. I think, deep packet inspection is also feasible.
Config updates are pushed centrally to these boxes.
All ISP providers are required to have black boxes installed on-site. These boxes can do traffic shaping (e.g. Twitter is degraded) and basic filtering based on IP addresses. I think, deep packet inspection is also feasible.
Config updates are pushed centrally to these boxes.
Self-managed VPNs still work.