Sign in Subscribe
Data

Russian ISPs throttle Cloudflare traffic to 16KB

Russian Internet Service Providers implement traffic caps that disrupt digital marketing infrastructure across major web services.

Luis Rijo

• 8 min read
Russian ISPs throttle Cloudflare to 16KB, isolating Russia from global internet connectivity
Russian ISPs throttle Cloudflare to 16KB, isolating Russia from global internet connectivity

Since June 9, 2025, Russian Internet Service Providers have systematically throttled access to websites and services protected by Cloudflare, implementing a data cap that limits transfers to just 16 kilobytes per connection. This restriction effectively renders most modern websites inaccessible to Russian users, disrupting the digital marketing ecosystem that relies heavily on Cloudflare's infrastructure.

According to Cloudflare's technical analysis published on June 26, 2025, "Internal data analysis suggests that the throttling allows Internet users to load only the first 16 KB of any web asset, rendering most web navigation impossible." The limitation affects approximately 20% of the entire internet, given Cloudflare's market position as the world's leading content delivery network and DDoS protection service.

PPC Land Newsletter
CTA Image

Get the PPC Land newsletter ✉️ for more like this.

Subscribe

Summary

Who: Russian Internet Service Providers including Rostelecom, Megafon, Vimpelcom, MTS, and MGTS are implementing traffic restrictions affecting websites protected by Cloudflare, impacting millions of Russian internet users and international businesses serving Russian markets.

What: A systematic throttling mechanism that limits data transfers to 16 kilobytes per connection, effectively breaking website functionality while maintaining basic connectivity. The restriction affects all internet protocols and prevents normal web browsing, particularly impacting marketing technology infrastructure.

When: The throttling began on June 9, 2025, with peak disruption occurring between June 13-15, 2025. Cloudflare confirmed the restrictions in a detailed technical analysis published on June 26, 2025.

Where: The restrictions are implemented within Russian internet infrastructure, affecting connections from inside Russia even when they reach servers located outside the country. The throttling impacts all Russian regions where the affected ISPs operate.

Why: The restrictions appear designed to force migration from Western technology services to domestic alternatives, combat VPN and circumvention tools, and advance Russia's goal of creating a sovereign internet isolated from Western infrastructure. The technical implementation suggests coordination with broader efforts to control information access and reduce reliance on foreign technology providers.

Follow PPC Land on Google News

The throttling impacts all connection methods and protocols, including HTTP/1.1, HTTP/2 on TCP and TLS, as well as HTTP/3 on QUIC. Russian ISPs confirmed to be implementing these restrictions include Rostelecom, Megafon, Vimpelcom, MTS, and MGTS. Cloudflare has documented several technical mechanisms being employed, including injected packets to halt connections and packet blocking that causes timeouts.

Technical impact reveals sophisticated filtering methods

Cloudflare's engineering team identified that Russian ISPs are using multiple throttling and blocking mechanisms. The 16KB limit corresponds to approximately 10 to 14 packets depending on the underlying technology. This specific threshold appears designed to allow basic connectivity while preventing functional website loading.

Network Error Logging data shows an increase in TCP connections being reset prematurely, while QUIC connections have experienced significant protocol errors. The company's internal monitoring tools revealed substantial packet loss to Russian data centers, with each data center showing proportional increases in connection failures.

The throttling affects connections even when they reach Cloudflare servers located outside Russia, suggesting the disruption occurs within Russian ISP infrastructure, close to end users. This implementation strategy makes circumvention particularly challenging since the filtering happens at the network level rather than through simple DNS blocking.

Marketing technology infrastructure faces disruption

The restrictions create significant challenges for digital marketing operations that depend on Cloudflare's services. Many marketing technology platforms, analytics tools, and content delivery systems rely on Cloudflare for security and performance optimization. The throttling effectively breaks website functionality for Russian audiences, disrupting analytics collection and customer engagement platforms.

However, the impact on advertising campaigns remains limited since Google no longer serves ads in Russia. Google stopped serving ads to Russian users in March 2022 due to the ongoing war in Ukraine, and deactivated all Russia-based AdSense accounts in August 2024, effectively eliminating the primary digital advertising ecosystem in the country.

The Russian throttling represents a new form of technological censorship that directly impacts website functionality and measurement capabilities rather than active advertising campaigns.

Companies operating in Russia now face difficult decisions about their technology stack. According to estimates by Russian experts, Cloudflare's services hold approximately 44% of the market among CDN providers. Switching to alternative providers requires significant time investment and incurs additional costs, particularly challenging for organizations that have integrated Cloudflare deeply into their infrastructure.

Broader targeting of Western technology infrastructure

The throttling extends beyond Cloudflare to other major Western hosting providers. Similar restrictions reportedly affect Germany's Hetzner, US-based DigitalOcean, and France's OVH. This coordinated approach suggests a systematic effort to force migration away from Western technology services toward domestic alternatives.

According to technical analysis by MediaZona, the restrictions target common VPN protocols like WireGuard and disrupt peer-to-peer technologies including the BitTorrent DHT network. One primary objective appears to be combating tools used to circumvent state censorship, as Hetzner and DigitalOcean are widely used by Russians to host private VPN servers.

The filtering also affects the Steam gaming platform through targeted UDP protocol blocking, demonstrating the breadth of services impacted by these technical restrictions. This approach allows authorities to disrupt the ecosystem of circumvention tools without blocking each service individually.

Economic implications for Russian businesses

The restrictions create a paradox for Russian companies that rely on Cloudflare for DDoS protection. Blocking access to one of the world's most important DDoS mitigation services makes Russian businesses more vulnerable to cyber attacks while simultaneously forcing them onto more expensive and less capable local alternatives.

Russia lacks the domestic capacity to replace services provided by a global leader like Cloudflare. The company protects entire corporate networks and helps customers build internet-scale applications efficiently. Russian alternatives cannot match this scale or technical capability, creating competitive disadvantages for domestic businesses.

The forced migration to domestic services aligns with Russia's "landing law," which requires foreign technology firms to establish local operations. However, the technical implementation through throttling rather than legal requirements suggests urgency in pushing this transition.

Government justification and formal communications

Cloudflare reported that it "has not received any formal outreach or communication from Russian government entities about the motivation for such an action." However, the company noted that these actions are "consistent with longstanding Russian efforts to isolate the Internet within its borders and reduce reliance on Western technology by replacing it with domestic alternatives."

Russian President Vladimir Putin recently publicly threatened to throttle US technology companies operating inside Russia, providing political context for the technical restrictions. The throttling represents implementation of these threats without formal legal processes or communication with affected companies.

Previous incidents provide precedent for this approach. In October 2024, Russia's media censor Roskomnadzor blocked thousands of local websites using Cloudflare's Encrypted Client Hello feature, citing concerns about bypassing access restrictions. That action affected sites overnight without advance warning to operators.

Impact on content creators and digital marketing

The Russian throttling compounds these challenges by eliminating entire markets from global digital reach, though traditional advertising impact remains minimal since Google ceased ad operations in Russia. Google stopped serving ads to Russian users in March 2022 and completely deactivated Russia-based AdSense accounts in August 2024, ending the primary monetization pathway for Russian content creators.

Companies that previously served Russian audiences through Cloudflare-protected websites now face complete connectivity breakdown, forcing expensive infrastructure changes or market abandonment. Marketing measurement becomes impossible when websites cannot load properly. Analytics platforms, conversion tracking, and customer relationship management systems all depend on reliable connectivity that the throttling eliminates.

Technical circumvention proves limited

Cloudflare explicitly states that it cannot restore access through technical means. "As the throttling is being applied by local ISPs, the action is outside of Cloudflare's control and we are unable, at this time, to restore reliable, high performance access to Cloudflare products and protected websites for Russian users in a lawful manner."

The company advises affected website operators to "reach out and solicit Russian entities to lift the throttling measures that have been put in place." This recommendation acknowledges that technical solutions cannot overcome infrastructure-level restrictions implemented by ISPs.

Enterprise customers receive individual consultation through account teams, but no systematic technical workarounds exist. The throttling's implementation at the ISP level makes traditional circumvention methods ineffective, as the restrictions occur before traffic reaches international infrastructure.

International implications for internet freedom

The Russian throttling represents a new model of internet censorship that could influence other governments' approaches to controlling information flow. Unlike simple website blocking, the technical sophistication required to implement precise data caps demonstrates advanced network management capabilities.

Digital rights organization Roskomsvoboda reports massive waves of mobile internet restrictions impacting over 30 regions across Russia. While many restrictions were previously justified as protection against drone attacks near the Ukrainian border, the geographic expansion suggests broader application of these techniques.

The approach affects fundamental internet operations while maintaining plausible deniability. Websites remain technically accessible but functionally unusable, creating confusion about whether problems stem from technical issues or deliberate interference.

Market response and adaptation strategies

Organizations dependent on Russian market access must now evaluate costly infrastructure changes. Switching away from Cloudflare requires comprehensive planning, including security audits, performance testing, and integration with new provider ecosystems.

Some companies may choose to abandon Russian markets entirely rather than invest in alternative infrastructure. The combination of technical challenges, increased costs, and uncertain regulatory environment makes continued operations difficult for international businesses.

PPC Land's analysis of global internet trends shows that internet traffic grew 17.2% globally in 2024, but government shutdowns accounted for over half of major disruptions. The Russian throttling continues this trend of state intervention in internet infrastructure.

Domestic Russian businesses face pressure to demonstrate loyalty by switching to local providers, even when those alternatives offer inferior service. This creates a two-tiered internet system where domestic companies operate under different technical constraints than international competitors.

Looking forward: implications for global internet infrastructure

The Russian implementation of precise data throttling demonstrates technical capabilities that other governments may adopt. The 16KB limit shows sophisticated understanding of modern web architecture and the minimum data requirements needed to break website functionality.

This approach could influence how other countries implement internet restrictions, moving beyond simple blocking toward more subtle degradation that maintains basic connectivity while preventing effective use. Such techniques complicate international efforts to measure and respond to internet freedom restrictions.

For the marketing industry, the Russian case highlights infrastructure dependencies that may not be apparent until disrupted. Companies building global digital marketing operations must now consider geopolitical risks to their technology stack selection and develop contingency plans for infrastructure-level restrictions.

Timeline