Internet whitelists in Russia: what they are and how bypassing works
Whitelists are a mode in which only approved sites and apps work on mobile internet. How it works, what's usually on the list and why an ordinary VPN doesn't work under whitelists.
Normally the internet works as "everything except what's banned". A whitelist is the reverse: nothing except what's approved. The carrier only lets traffic through to pre-approved addresses and services.
Where and when. On mobile internet, usually in specific regions and for limited periods, for example during security-related shutdowns. Home broadband and Wi-Fi usually keep working — hence "everything works at home, only some apps on mobile".
What's usually on the list. Government services, major banks and payment services, marketplaces, taxis and delivery, domestic social networks, messengers and search engines. Foreign services — and ordinary VPNs — aren't.
Why a normal VPN fails. It connects to its own server; if that address isn't whitelisted the connection simply doesn't happen, however well the VPN disguises traffic.
How bypassing works. Connect through addresses that are already whitelisted — for example a large Russian company's CDN, which hundreds of approved sites rely on. VPN traffic travels inside ordinary HTTPS requests to the CDN, which forwards it to the VPN server. Downsides: lower speed, not every carrier and region, and CDNs change rules, so the VPN has to keep adapting.
What to do. Check on Wi-Fi first; then pick the mobile profile in your VPN — in Surok that's "Europe · auto", connected via a CDN we keep working — and refresh the subscription. Get Surok on the download page.