Russian data centers must reserve 10% capacity for state IT needs

Owners of non-state data centers in Russia have been instructed to hold back 10% of their total capacity to support the country's state-owned IT infrastructure if needed. According to Reuters, the directive aims to quickly unlock additional compute capacity for state use in case of future emergencies.

• Non-state data centers in Russia must set aside 10% capacity for state IT infrastructure.
• The Digital Development Ministry has been ordered to inventory all private data center capacity.
• Third-party owners will have 24 hours to comply once ordered by a new government commission.

Background on drone attacks and infrastructure damage

This measure comes as Russian data centers have increasingly become targets for Ukrainian drone attacks, causing massive damage and disrupting state internet services. In early October, drones struck Russia's largest 63-megawatt data center, forcing multiple modules to be taken offline. Users reported issues with Yandex services despite claims that core systems remained operational.

Two weeks later, the Russian finance ministry's data center, which housed tax databases and state registries, was also damaged in a strike. Alongside physical drone attacks, state institutions continue to face cyber threats. Notably, the Russian Federal State Statistics Service admitted that its servers suffered a cyberattack resulting in the theft of 23TB of data.

Implementation and regulatory measures

To enforce the new policy, President Putin directed the Digital Development Ministry to inventory all available data center space and compute capacity across private facilities nationwide. A newly established government commission will hold the authority to command the release of these reserved resources, giving third-party operators just 24 hours to comply.

Additionally, the temporary utilization of data centers located outside of Russia has been discussed, pending formal approval from the Federal Security Service (FSB). These developments highlight the escalating efforts by the state to secure and control critical digital infrastructure amidst ongoing disruptions.

Implications for the tech industry and business

The mandate introduces significant operational uncertainty for private cloud providers and data center operators within the country. Being forced to surrender a tenth of their compute resources on short notice could impact commercial clients and platform stability. The move underscores heightened state oversight and the vulnerability of digital infrastructure during ongoing geopolitical tensions.