Ars Technica confirms the approximate time of unthrottling via an anonymous source at a Russian ISP:
According to our source, the mistaken block string was finally corrected with proper match limiting at around 4 am Eastern time today—Twitter’s t.co is still affected as intended, but Microsoft, Russia Today, and other “collateral damage” sites can once again be browsed at full speed.
04:00 EST = 09:00 UTC = 12:00 MSK.
They also give some information about the hardware:
Our source tells us that Roskomnadzor distributes to all Russian ISPs a hardware package that must be connected just behind that ISP’s BGP core router. At their small ISP, Roskomnadzor’s package includes an EcoFilter 4080 deep package inspection system, a pair of Russian-made 10Gbps aggregation switches, and two Huawei servers. According to our source, this hardware is “massive overkill” for its necessary function and their experienced traffic level—possibly because “at some point in time, government planned to capture all the traffic there is.”
Currently, the Roskomnadzor package does basic filtration for the list of banned resources—and, as of this week, has begun on-the-fly modifications of DNS requests as well. The DNS mangling also caused problems when first enabled—according to our source, YouTube DNS requests were broken for most of a day. Roskomnadzor eventually plans to require all Russian ISPs to replace the real root DNS servers with its own, but that project has met with resistance and difficulties.
I hadn’t heard about this “on-the-fly modification of DNS queries” before.
