CONCEPT Cited by 1 source
Government-directed Internet shutdown¶
A government-directed Internet shutdown is a state-ordered suspension of public Internet connectivity, affecting either an entire country, a subset of regions, or a class of services (e.g. mobile-only, specific platforms). Distinguished from accidental outages by explicit policy origin: authorities instruct network operators (typically mobile carriers and ISPs) to cut or filter access, often citing misinformation, election integrity, civil unrest, or national security.
Implementation mechanisms¶
Shutdowns can be implemented through several technical paths, each visible differently from external observatories like systems/cloudflare-radar:
- Operator-instructed suspension — regulator orders ISPs / mobile operators to block or null-route traffic. Often visible as coordinated drop-to-near-zero across affected networks. Uganda's 2026 pre-election shutdown is the canonical wiki instance: the Uganda Communications Commission formally "instructed mobile network operators to suspend public Internet access" effective 18:00 local on January 13.
- BGP route withdrawal — prefixes announced by in-country ASes disappear from the global routing table. Produces a clean, observable signal: the country effectively goes dark at the routing layer. See concepts/bgp-route-withdrawal.
- Deep-packet-inspection filtering — routes stay advertised, but traffic is filtered at the ISP's edge. The country looks online from the BGP view but traffic drops to ~0%; small amounts typically escape because not every path can be blocked deterministically. Iran's February 28 2026 shutdown is the canonical wiki instance.
- Whitelist-based allowance — selected users or SIM cards are permitted access to a curated list of approved domains. Traffic is nonzero but minimal and from a known cohort. Iran's ongoing shutdown names this mechanism: "'whitelists' and 'white SIM cards' restricting access to only approved Internet sites by selected users."
- Selective IPv6 withdrawal — observed as a leading indicator before the main traffic drop in Iran's January 8 shutdown: IPv6 prefixes disappeared several hours before the traffic loss, though IPv4 stayed announced.
Motivation patterns observed¶
Cloudflare Radar's multi-year corpus shows recurring motivations:
- Elections. Uganda (2021 and 2026), Republic of Congo (2016, 2021, 2026) all ran election-linked shutdowns. See concepts/election-related-shutdown.
- Civil unrest / protests. Iran's January 8 shutdown followed domestic unrest.
- Active military conflict. Iran's February 28 shutdown began as military strikes on Iran escalated.
Duration envelope¶
Short shutdowns (hours) tend to map to elections and protests. Multi-week shutdowns require sustained political will and inflict significant economic damage. Iran's February 28 2026 shutdown remained largely in place as of late April, making it "one of the longest sustained Internet disruptions observed in recent years" — most shutdowns on the Radar corpus resolve within days or weeks.
Seen in¶
- sources/2026-04-28-cloudflare-q1-2026-internet-disruption-summary — Q1 2026 review canonicalises three simultaneous government- directed shutdowns (Uganda election-linked; Iran dual shutdowns via filtering + whitelist; Republic of Congo election-linked) after a Q1 2025 quarter with zero observed government-directed shutdowns. Uganda UIXP traffic collapsed from ~72 Gbps to ~1 Gbps; Iran dropped to <1% of previous traffic; Republic of Congo traffic near-zero for ~60 hours.