Obtaining the information you need to have a resource whitelisted by the Russian Ministry of Digital Development

During the periods of mobile internet restrictions in the Russian Federation, telecom providers continue to make a number of socially important resources permanently available to end users. These socially important resources constitute the so-called whitelist, maintained and regularly updated by the Ministry of Digital Development, Communications and Mass Media of the Russian Federation (Ministry of Digital Development).

If you want your resources whitelisted by the Ministry of Digital Development, and your resources rely on the Yandex Cloud infrastructure and services, you will need the public IP addresses allocated by Yandex Cloud for end user access to your resources.

How to find out the IP address of your resource in the Yandex Cloud infrastructureHow to find out the IP address of your resource in the Yandex Cloud infrastructure

All public IP addresses of the resources you want whitelisted must be reserved for you and no one else. You may attach a relevant screenshot from the management console as a proof of your right to use these IP addresses.

How to find out the public IP address of your resource in Yandex CloudHow to find out the public IP address of your resource in Yandex Cloud

In the Yandex Cloud ecosystem, some services assign individual public IP addresses to certain user resources. These resources include:

• VM instances in Yandex Compute Cloud. To learn the public IP address of a VM instance, follow this guide.
• Physical servers in Yandex BareMetal. To learn the public IP address of a BareMetal server, follow this guide.
• Kubernetes clusters and cluster nodes in Yandex Managed Service for Kubernetes. To learn the public IP address of a Kubernetes cluster and nodes, follow these guides: Information about existing Managed Service for Kubernetes clusters and Get the public IP address of the node.
• L7 load balancers in Yandex Application Load Balancer. To learn the public IP address of an L7 load balancer, follow this guide.
• External network load balancers in Yandex Network Load Balancer. To learn the public IP address of an external network load balancer, follow this guide.
• Proxy servers in Yandex Smart Web Security. To learn the public IP address of a proxy server, use your management console.
• With Yandex Cloud CDN, you can get dedicated IP addressing for your CDN resources distributed through all points of presence. To get a dedicated IP address assigned to your CDN resource alone, contact Yandex Cloud support.

Other Yandex Cloud services do not assign individual public IP addresses to user resources; instead, the user's traffic is routed to a single IP address and processed in parallel with other users' traffic.

How to reserve a public IP address to avoid losing itHow to reserve a public IP address to avoid losing it

Public IP addresses can be dynamic or static. A dynamic IP address may change when the resource it is assigned to (e.g., a Compute Cloud VM instance) is stopped and then restarted. A static IP address is reserved and available to the user's resources on a permanent basis. For more information, see Public addresses.

Only static (reserved) public IP addresses can be whitelisted by the Ministry of Digital Development. You can reserve a static public IP address either before or after creating the resource. For more information, see these guides:

• Reserving a static public IP address
• Converting a dynamic public IP address to static

To prevent accidental deletion, get your reserved public IP address protected. For more information, see Configuring deletion protection.

Follow these recommendations to proactively list the IP addresses used by your resources, make them deletion-protected, and use them as needed.

What to do if your Yandex Cloud resource does not have a dedicated public IP addressWhat to do if your Yandex Cloud resource does not have a dedicated public IP address

You may also face a situation where there is a Yandex Cloud infrastructure resource which is not on the list mentioned above and cannot get a public IP address of its own (e.g., an Yandex Object Storage bucket), but you still need to have it whitelisted by the Ministry of Digital Development.

In which case you can introduce an additional intermediate component in between the traffic and your application: an L7 load balancer. In this setup, user requests first go to the load balancer, which has a dedicated IP address you can have whitelisted by the Ministry of Digital Development; and from there, the requests go to the target resource in the Yandex Cloud infrastructure.

This access arrangement offers some additional benefits: give your L7 load balancer a Smart Web Security security profile for your resources to get extra application-layer (L7) protection against DDoS attacks and bots.

Below are examples of how you can use a load balancer for access to applications:

• Creating a distributed infrastructure with secure access
• Integrating an L7 load balancer with Cloud CDN and Object Storage
• Creating a load balancer with DDoS protection
• Creating an L7 load balancer in Yandex Application Load Balancer with a Yandex Smart Web Security profile
• Creating an L7 load balancer with a Smart Web Security security profile through an Application Load Balancer Ingress controller
• Emergency DDoS protection in Application Load Balancer, L7
• Fault-tolerant website with load balancing via Yandex Application Load Balancer
• Setting up virtual hosting
• Protecting a service with Smart Web Security