EcoFilter

EcoFilter is the network device intended for high-performance URL filtering (URL-filtering) of the prohibited websites according to registers of Roskomnadzor, Ministry of Justice and also the undesirable websites according to the register of TsAIR ( www.cair.ru) and the user lists.

EcoFilter is the Russian product that is confirmed officially by the decision of interdepartmental expert advice at the Ministry of Industry and Trade of the Russian Federation and the Ministry of Telecom and Mass Communications of the Russian Federation.

The functionality of URL filtering allows the telecom operator to fulfill the requirements of the legislation (FZ-139; FZ-149; FZ-187; FZ-436) concerning filtering of the undesirable and prohibited resources on the Internet and also to render additional services like "children's Internet" with filtering according to big lists (to 30 million URL).

EcoFilter

History of development of a product

2017

EcoFilter is successfully tested by Roskomnadzor

On October 3 in RDP.RU reported that experts of Roskomnadzor tested EcoFilter - a specialized hardware and software system for URL filtering of network traffic. The analysis of results showed that the device completely solves a problem of identification and blocking of the prohibited traffic.

Telecom operators from five federal districts of the Russian Federation took part in testing. During the researches EcoFilter showed the best results on quality of filtering among the devices tested by Roskomnadzor. It became possible thanks to in the equipment RDP.RU of a modern method of URL traffic filtering. This method assumes filtering through DPI (the deep analysis of packets) without use IP предфильтров which already showed the weaknesses - vulnerability to the attacks and high percent of admissions of the prohibited resources.

During the work with the EcoFilter system experts noted the fast procedure of deployment and setup of a complex – taking into account all organizational and technical actions, system implementation can take only several days. The device has high compatibility with any infrastructure, the producer does not impose mandatory requirements to the existing equipment of network of the operator.

Roskomnadzor holds testing of the program and hardware-software filtering systems presented at the Russian market. Thus the regulator helps telecom operators to select the most effective tools for access restriction to the prohibited resources and observance of the Russian legislation.

Nikolay Guzakov, technical director and founder of RDP.RU:

100% filtering according to the big URL lists are what our company aimed many years at. We collected unique examination in this sphere and achieved serious results which are always ready to confirm in practice. Our company provides the equipment for free testing and renders the professional help in integration and setup. We do not limit a circle of customers, the reasons for URL filtering can be different: information security, corporate standards. At observance of our recommendations by the operator the EcoFilter system completely closes the need for filtering of the prohibited and undesirable traffic

Support of IPv6

On July 24 the RDP.RU company announced implementation of support of IPv6 protocol in a new software version of EcoFilter. Free updating is available to all clients of the company within the existing service contracts.

IPv6 is used in networks of many telecom operators though has no so wide circulation yet as his predecessor IPv4. It is expected that over time the IPv6-addresses will be included the register of Roskomnadzor, noted in RDP.RU.

At the moment the regulator does not oblige to filter traffic to the IPv6-addresses — yet they are not just in the list of Roskomnadzor. Nevertheless, our customers think already now that IPv6 of the address will appear in the register soon, and Auditor will expose for them penalties. We decided to kill from them this "headache" that they could focus on pluses of implementation of IPv6. Eventually, matter not only in penalties – first of all, we should provide reliable protection of subscribers against harmful content. It is a question of our general security — Sergey Kulikov, the commercial director of RDP.RU emphasized

Functionality of a product

Filtering of URL

Filtering of URL (type of host/way) for the HTTP protocol and hosts for the HTTPS protocol on all TCP ports is supported. And lists of the filtered URL can be appointed both to all subscribers at once, and to everyone personally — depending on its tariff plan. For user identification Radius or the proprietary TCP interface is used. The EcoFilter device can be complemented with functionality of the service gateway (cutting of speeds to subscribers, readdressing on the page of shutdown, URL-based open garden, URL-based policing, CG-NAT).

Analysis of traffic

EcoFilter allows to analyze all traffic of provider on all TCP ports that guarantees to 100% filtering according to the Auditor system. Performance of a DPI system is to 160gbit/with in 1U that is good result on world measures. If necessary performance is easily scaled by use of several devices assembled in LAG.

Detection of URL

In the solution EcoFilter mechanisms of detection of URL are provided in requests of HTTP even if the subscriber uses blocking circumventors, such as access using non-standard port on the server, masking of URL by fragmentation of a GET request, use of the non-standard sequence of headings, etc.

At detection of URL in heading its comparison to the set "black" and "white" lists is made. Unloading of the list of Roskomnadzor is made automatically according to the schedule.

Extraction of GET requests

The EcoFilter device allows to make extraction of all GET requests of subscribers with record them on the external server (Big Data collecting). Function of export of information on GET requests gives the chance to carry out the analysis and to build profiles of interests and risks — both for certain users, and for all subscriber base of provider. Among other this functionality allows to optimize work with outflow thanks to an opportunity to predict loss of the specific subscriber.

See Also

• Blocking of the websites in Russia

• Copyright on the Internet
• Censorship on the Internet. World experience
• Censorship (control) on the Internet. Experience of China
• Censorship (control) on the Internet. Experience of Russia, Roskomnadzor, GRFC
• Law on regulation of Runet
• VPN and privacy (anonymity, anonymizers)
• The autonomous Internet in Russia
• SORM (System for Operative Investigative Activities)
• State detection system, warnings and mitigations of consequences of the computer attacks (State system of detection, prevention and elimination of consequences of computer attacks)
• National filtering system of Internet traffic (NASFIT)
• Yastreb-M Statistics of telephone conversations
• How to bypass Internet censorship of the house and at office: 5 easy ways
• The auditor - a control system of blocking of the websites in Russia

224