Russia Orders Commercial Data Centres to Reserve Ten Percent Capacity for the State

A new presidential decree in Russia requires commercial data centre operators to reserve ten percent of their capacity for government emergency use following drone strikes against major facilities.

A Mandatory Ten Percent Compute Levy

Under a decree signed by Russian President Vladimir Putin, owners of privately operated data centres across the country must now set aside a tenth of their overall capacity to guarantee the continuity of national IT infrastructure. The policy establishes a legal mechanism that gives public authorities rapid access to enterprise server farms, storage clusters, and network bandwidth whenever state systems face disruption.

To enforce the policy, the Ministry of Digital Development has been directed to carry out a comprehensive nationwide audit. Inspectors will catalogue available floor space, power envelopes, and computing capacity across all non-state facilities. A dedicated government commission will oversee the reserve quota, empowered to issue formal activation orders whenever public infrastructure requires backup compute. Once an activation order is handed down, private operators must grant full operational access within 24 hours.

The decree also introduces a rare concession to cross-border compute. Under specific conditions, Russian organizations may temporarily route workloads through facilities located outside the country, provided each deployment receives explicit clearance from the Federal Security Service (FSB). The inclusion of this provision points to acute domestic capacity constraints, showing that state planners recognize local facilities may not always be sufficient to absorb sudden systemic shocks.

Kinetic Warfare Meets the Server Room

The mandate comes in the wake of escalating physical attacks against digital assets inside Russia. While cyber operations have characterised the conflict since 2022, recent weeks have seen a shift toward physical disruption. Long-range drone strikes have hit data centres operated by two of the country's largest corporate and financial institutions, the internet conglomerate Yandex and state-backed lender Sberbank.

Modern data centres are uniquely sensitive industrial installations. While their internal systems benefit from software-defined redundancy and distributed database architecture, their physical facilities are geographically fixed and structurally vulnerable. Unmanned aerial vehicles carrying modest explosive payloads can inflict catastrophic damage on external utilities that server rooms depend upon, including high-voltage power substations, external chilling arrays, water pipelines, and rooftop cooling towers.

If a facility loses grid power and its backup diesel generators or cooling loops suffer direct structural damage, server temperatures can reach shutdown thresholds in a matter of minutes. Redundant failover architectures rely on unaffected secondary facilities being able to absorb the displaced load immediately. By commandeering ten percent of every private operator's capacity, the Russian government is effectively attempting to construct a distributed, state-directed safety net across commercial real estate, spreading the operational risk away from standalone corporate campuses.

Operational Headaches for Facility Engineers

For data centre managers and site reliability engineers, complying with a mandatory ten percent reserve creates immediate technical and commercial friction. Modern data centres are not built to hold large amounts of capacity in permanent suspension. Facilities operate on strict financial models where unused rack space, unallocated power feeds, and dormant cooling units directly depress gross margins.

Engineers face two difficult implementation paths. The first is maintaining dark capacity, where ten percent of physical rack space, power distribution units, and network switches remain powered down or strictly quarantined from commercial clients. This approach protects customer workloads from performance degradation but leaves expensive hardware unmonitored and underutilised. The second option is provisioning preemptible virtualization pools, where commercial tenants run workloads on the understanding that government workloads will terminate or throttle commercial tasks if an emergency order arrives.

The 24-hour turnaround window demanded by the decree leaves very little margin for error. Migrating enterprise applications, provisioning secure virtual environments, isolating state data to comply with domestic security laws, and reconfiguring network boundaries within a single day requires extensive automation. Many tier-two and tier-three commercial operators in Russia lack the software orchestration layers needed to execute that scale of workload migration seamlessly, raising the likelihood of configuration errors and collateral service outages for paying customers.

Hardware Sanctions and Forced Consolidation

The decree also highlights the persistent hardware bottlenecks facing the Russian technology sector. International trade sanctions and export controls have severely restricted the formal import of enterprise-grade server components, high-speed networking silicon, and cutting-edge graphics processing units. While parallel import schemes and grey-market supply lines allow some hardware to filter through third countries, the flow is inconsistent, expensive, and lacking vendor warranties.

Building dedicated, state-owned backup facilities to replace damaged or vulnerable public IT nodes would require billions of roubles and thousands of specialized server racks that the state simply cannot procure at scale. By requiring the private sector to surrender ten percent of its existing footprint, the Kremlin is bypassing its procurement bottlenecks by drawing directly on commercial infrastructure that is already installed, wired, and cooled.

As reported by Reuters, this capacity reserve mechanism represents an aggressive assertion of regulatory authority over private digital infrastructure. It blurs the line between civilian tech operations and national resilience assets, forcing private enterprise to absorb the operational and financial costs of state infrastructure defense.

Russian technology firms now find themselves operating under conditions similar to wartime mobilization. Commercial customers, including local retailers, logistics firms, and software companies, will likely see colocation pricing rise as operators bake the cost of the mandated ten percent reserve into their standard rack fees. At the same time, foreign companies still operating auxiliary systems in Russian data centres face heightened security risks, knowing their workloads could suddenly share physical racks and power feeds with state administrative platforms.

Why it matters

The move marks an important inflection point for data centre operations, telecommunications providers, and field engineers worldwide. For decades, disaster recovery models were built around natural hazards, power cuts, fiber cuts, and software outages. The events in Russia show that physical kinetic strikes against commercial compute hubs are now a regular hazard of modern conflict.

When governments respond to such threats with direct operational requisition, the burden falls directly on site engineers, network architects, and facility technicians. Teams must manage high-stakes state audits, rapid workload preemption, strict multi-tenant isolation, and shortened incident-response timelines. For infrastructure operators everywhere, the border between commercial colocation and critical national security infrastructure is disappearing, making physical site hardening, supply-chain resilience, and autonomous failover mechanisms essential operational requirements rather than optional best practices.