Major web services go dark in Russia amid reported Cloudflare block

Russian internet users this week faced widespread outages that regulators attributed to issues with “foreign server infrastructure.” However, local experts suggested the disruptions stemmed from Russia’s blocking of Cloudflare, a U.S.-based service that helps websites stay secure, load faster, and remain accessible during cyberattacks.

According to data from several internet monitoring websites, the outages were observed Thursday across multiple Russian regions, particularly in the Urals and Siberia, affecting platforms such as TikTok, Steam, Twitch, Epic Games, Duolingo and major Russian mobile operators.

The disruption also impacted banking and government services, with users reporting difficulties accessing apps for Sberbank, Gazprombank and Alfa-Bank, as well as the Russian government’s portal. Messaging apps, including Telegram and WhatsApp, also faced interruptions.

In a statement to a local news agency, Russian internet regulator Roskomnadzor said the disruptions affected services that rely on foreign server infrastructure and recommended that local organizations switch to Russian hosting providers.

Last November, Roskomnadzor blocked thousands of local websites using Cloudflare’s encryption feature, which is designed to enhance privacy and security for internet users. At the time, the agency claimed that the service allowed users to bypass restrictions on access to information banned in Russia, making its use illegal under Russian law.

The latest outage is also likely linked to Roskomnadzor’s broader efforts to ban Cloudflare in the country, according to Russian digital rights organization Roskomsvoboda. Cloudflare has a limited footprint within Russia, but its services still apply to sites reached outside the country.

On Thursday, Roskomnadzor announced plans to inspect Russian services and telecom operators for their use of foreign servers, stating that these measures are necessary to improve the resilience and security of Russia’s internet infrastructure.

“This blocking is a kind of ‘trial shot’ — both to see how much disruption it causes and to push Russian-based resources away from Cloudflare, signaling that it won’t work reliably and will only create problems for them,” said Roskomsvoboda’s technical director, Stanislav Shakirov.

Shakirov suggested that Roskomnadzor will eventually block Cloudflare entirely. In February, Russian authorities added Cloudflare to the so-called “surveillance register,” which includes companies required to share user data — including correspondence and audio or video calls — with Russia’s intelligence services. Companies that refuse to comply may face blockages and other regulatory pressures.

According to local media reports, Cloudflare has previously refused to meet Roskomnadzor’s demands. The company has not responded to Recorded Future News' request for comment.

The duration of the current disruptions remains unclear. To restore access, affected services should stop using Cloudflare as a Content Delivery Network (CDN) or proxy and either switch to Russian alternatives or find other solutions.

However, this presents a challenge: Cloudflare is primarily used to mitigate distributed denial-of-service (DDoS) attacks, and no equally convenient and free alternative exists in Russia, according to Shakirov.

“This puts web service owners in a difficult position: they must choose between becoming more vulnerable to DDoS attacks or being blocked along with Cloudflare’s infrastructure,” he said.

Shakirov suggests that if Roskomnadzor determines the block is effective, it may pursue a permanent ban, similar to measures taken in Iran. However, if the collateral damage proves too significant, authorities could scale back the restrictions.

“If a full blocking occurs, it will mark a new era of censorship on the Russian internet,” Shakirov said.

Russia’s crackdown on foreign tech services aligns with the Kremlin’s policy of digital isolation, pushing local companies to migrate to state-controlled infrastructure. Moscow has previously blocked access to messaging apps such as Viber, Signal, and Discord, citing alleged legal violations. It has also admitted to deliberately slowing down YouTube loading speeds in response to Google’s refusal to comply with Russian tech regulations.

Many Western tech services exited the Russian market after its invasion of Ukraine. However, Cloudflare did not terminate all of its services in the country. “Russia needs more internet access, not less,” the company said in a statement at the time.

Nevertheless, to comply with U.S. sanctions, Cloudflare terminated services for customers linked to sanctioned entities, including Russian financial institutions and influence campaigns.

According to estimates by Russian experts, Cloudflare holds around 44% of the market among CDN providers, meaning that switching to alternatives will take time and incur additional costs.