Iran’s National Information Network (NIN)

Abstract

By 2026, Iran’s National Information Network (NIN) should no longer be understood merely as a long-term infrastructure project, but as a largely operationalized architecture of state-controlled digital sovereignty. The decisive question is not whether the project is “complete” according to official metrics, but that it now enables the state to throttle, selectively allow, or interrupt international connectivity to a significant degree without shutting down all domestic services.

Recent analyses of the shutdowns of 2025 and 2026 show that Iran has moved away from crude shutdowns toward a multi-layered model of selective reachability. The NIN should therefore be understood less as a “national internet” in the narrow sense and more as a strategic control infrastructure in which domestic hosting, routing control, filtering, whitelisting, and politically unequal allocation of access converge.

1. Introduction

The NIN is one of the central projects of Iranian cyberspace policy. Officially, it continues to be described as national digital infrastructure intended to improve availability, resilience, quality, and security, and not as a replacement for the global internet. Accordingly, Iranian government representatives also stated in 2026 that the NIN exists “in continuation” of international communication and is not a substitute for the internet. At the same time, the communications minister acknowledged that a prolonged withdrawal of global connectivity carries serious risks and that the population’s need for global internet access is real.

This double rhetoric is analytically revealing: it defends the NIN as an infrastructure project while indirectly confirming that national and global connectivity can, in practice, be separated.

From an analytical perspective, a purely official functional description is insufficient. Independent reports and research contributions describe the NIN as a dual system: on the one hand, as an expansion of national services, data centers, cloud infrastructure, and government infrastructure; on the other hand, as a foundation for censorship, surveillance, shutdowns, and selective restoration. Freedom House summarizes this concisely by noting that Iranian authorities further restricted access to the global internet and pushed the population into a more controllable “domestic version of the internet”.

2. Historical and institutional context

The NIN is the result of a longer state-strategic development in which digital infrastructure has increasingly been treated as a security issue. Recent analyses trace how Iran has not only built technical capacities, but has also deepened a normative model of authoritarian network governance. In 2026, ARTICLE 19 explicitly describes a close connection between Iranian digital repression and Chinese-influenced ideas of cyber sovereignty. This matters because it makes clear that the NIN did not emerge merely from domestic political pragmatism, but is embedded in an understanding of governance that interprets state control over networks, data flows, and platforms as a core element of sovereign power.

Institutionally, newer evidence also points to further securitization. Filterwatch’s report on the January 2026 shutdown describes a transition from bureaucratic control to a security-apparatus-centered “war room” model, in which the security apparatus and especially the IRGC appear as executing forces of internet policy decisions. This diagnosis should be read with care because it comes from civil society analysis; however, it is consistent with the observable militarization of enforcement logic in internet policy during crises.

3. Official goals and actual function

The official Iranian line presents the NIN as a resilience and development project. In 2026, officials again emphasized that the goal was not digital isolation, but a balanced combination of national capacities and international connectivity. In this sense, the communications minister spoke of “neither digital isolation nor absolute dependence”, but of “smart and balanced development”. This self-presentation is not politically meaningless, since the construction of national data centers, backbones, and services can in principle be legitimate infrastructure policy.

The actual function of the NIN, however, becomes visible less in government rhetoric than in crisis situations. There, the system emerges as an architecture of selective connectivity. The report on the June 2025 shutdown already described a “stealth blackout” logic: no longer simply the visible separation from the global network through the withdrawal of BGP routes, but a more centralized and less obvious mode in which DNS poisoning, deep packet inspection, and protocol whitelisting were combined in order to drastically restrict international communication while keeping domestic services functional.

The reports from 2026 go further. Filterwatch describes a “blocked-by-default” architecture for January and the following months, in which global connectivity no longer appears as a general default, but as selectively allocated access. This marks a qualitative shift: the state no longer limits itself to blocking and temporary shutdowns, but shapes a regime in which different user groups and services systematically receive different levels of reachability and access rights.

4. Implementation status: percentages, infrastructure, and the problem of official metrics

The question of how far the NIN is “complete” can only be answered to a limited extent through official percentages. An IRNA report from June 2024 stated that implementation had reached more than 63% by Khordad 1403; at the same time, the same report referred to an assessment by the National Center for Cyberspace that placed implementation at 59.18% by the end of Bahman 1402. For 2026, I still found references to 59.18% as the “latest” officially cited evaluation status, alongside political statements from 2025 that put implementation at “around 70%” and target values above 79%. What is more reliable than any single figure, therefore, is the observation that the state itself operates with several partly inconsistent measurement logics.

For current analysis, the more important question is which material carrier infrastructures are being expanded. In 2026, there are new official figures on fiber and access expansion: according to ISNA, the communications minister stated in June 2026 that coverage of the fiber project had surpassed 10 million connections and that the focus was increasingly shifting from mere area coverage to actual connection. Such figures do not by themselves prove completion of the NIN; they do show, however, that the expansion of physical carrier layers through which national services can be stabilized continues to advance.

For this reason, the official percentage is analytically secondary. Even if the NIN remains “unfinished” by state self-measurement, its key function is already clearly visible: the state can drastically restrict international connections while keeping central parts of the national digital domestic space operational. In this sense, the NIN is operationally more developed than unclear percentage figures suggest.

5. Technical architecture of the NIN

Technically, the NIN is not a single network but a multi-layered ecosystem. It includes at least four layers: first, domestic hosting and data-center capacity; second, national cloud and CDN structures; third, routing and control mechanisms at the gateways to the global network; and fourth, a portfolio of national basic services that can continue to function during phases of restricted external connectivity. This is precisely the structure described in the U.S. sanctions notice on Arvan Cloud, which refers to the NIN’s “integrated cloud network infrastructure”.

The technical control of shutdown situations is now documented much more precisely than it was only a few years ago. The June 2025 report by Miaan/ASL19/IODA emphasizes that the blackout was not primarily organized through the simple removal of BGP routes, but through a combination of DNS poisoning, protocol whitelisting, and DPI, which made it possible to neutralize many circumvention tools without shutting down all national services. Filterwatch adds that in January 2026, more than 98% of IPv6 routes were withdrawn before the nationwide blackout in order to force traffic onto infrastructures that were easier to control. This development points to a growing capacity not merely to block content, but to pre-shape the technical conditions of communication itself.

Another new aspect is how clearly the logic of asymmetric restoration is described. Filterwatch reports that after the January blackout, individual global services such as certain search engines selectively began working again, while broader access to the global network remained blocked. This supports the thesis that Iran has moved from a model of total blocking to a model of administratively defined minimal openings.

6. January to May 2026: from total blackout to hybrid model

The January 2026 shutdown marks a turning point in the available analyses. Filterwatch assesses it as a milestone in a doctrine of digital isolation; the report states that global connectivity disappeared at the peak and that the responsiveness of domestic devices temporarily dropped to only 3% of baseline. At the same time, the later restoration is explicitly described as asymmetric: since the more stable reestablishment beginning on January 27, traffic reportedly remained about 40% below pre-shutdown levels. This matters because it shows that “reconnection” is not the same as a return to the previous state.

For February 2026, Filterwatch already describes a new situation: during the nationwide blackout at the end of February, unlike in January, the NIN remained operational from the beginning while international connectivity was interrupted. This practically demonstrated the separation between domestic and external connectivity. This point is central to system analysis: when national intranet and service layers continue to operate during crises, the NIN becomes a genuine instrument of graduated sovereignty over communication spaces.

The situation after the partial reopening at the end of May 2026 is even more revealing. Filterwatch reports that Iranian internet traffic had risen only to 53% on the third day after restoration began and to around 60% on the fourth day compared with the level before January 8; at the same time, persistent problems with VPNs, DNS, latency, SSH access, CDNs, and push notifications were documented. The report therefore speaks of a “hybrid internet shutdown model” phase: formally partially reconnected, but functionally still structurally restricted. This is one of the most important new findings since the previous version.

7. From public good to privileged access

Perhaps the most consequential analytical sharpening in the newer reports is that the Iranian state increasingly redefines the global internet from a public right into a state-granted privilege. Filterwatch speaks of a dual-tier whitelisting model with two levels: a service-based level, on which certain tools are selectively permitted, and a user-based level, on which a kind of “digital aristocracy” retains privileged access. In this context, the report explicitly uses the terms “class-based internet” and “digital stratification”.

This diagnosis corresponds remarkably with official statements that try to distance themselves from precisely this practice. In April 2026, according to ISNA, the communications minister stated that high-quality internet is a right of the population and that any classification or differentiation of access, for example in the form of a “classified” or “tiered internet”, has no place in that basic logic; at the same time, deviating practices were described as “temporary and emergency-related”. The fact that a minister so explicitly positions himself against “internet tabaqati” is itself an indirect indication of how real the debate over unequal forms of access has become.

8. Companies and technical actors

On the corporate side, Arvan Cloud remains one of the most important actors that can be named with some reliability. In 2023, the U.S. Department of the Treasury stated that Arvan Cloud had played “a prominent role” in the development of NIN infrastructure. As a hosting and CDN provider, the company helped prepare the integrated cloud infrastructure of the NIN; in contracts with the Ministry of Communications, Arvan Cloud also explicitly promised interception capabilities enabling state control, censorship of incoming and outgoing traffic, and surveillance at the server level. These statements are robust because they come from an official sanctions justification; at the same time, analytical precision is important: Arvan Cloud is not the NIN, but it is clearly an important infrastructural enabler of its cloud and service layer.

The evidence on the transnational dimension has become more substantial in 2026, especially through ARTICLE 19. The report describes China’s material and technical support since at least 2010 as “instrumental” to the construction of Iran’s infrastructure of repression and names companies such as Huawei, ZTE, Hikvision, and Tiandy. What matters here is less the exact attribution of every single hardware component than the broader observation that Iran is not acting in isolation, but draws on imported technologies and authoritarian governance models.

9. Strategic significance: the NIN as infrastructural power

Politically and theoretically, the NIN should therefore be described not only as an instrument of censorship, but as a case of infrastructural power. Whoever controls communication infrastructure does not have to block content only after the fact; they can define in advance which platforms are reliably reachable, which connections are degraded, which protocols function, and which user groups retain access to the global information space. The reports from 2025 and 2026 document precisely this shift from content-based censorship to infrastructurally pre-shaped visibility and reachability.

Freedom House continues to classify Iran as one of the most repressive digital environments in the world and notes that the government makes access to the global internet more difficult while pushing users into a more controlled domestic version of the network. More recent analyses by Miaan and Filterwatch suggest that this policy should no longer be understood merely as ad hoc repression, but as a long-term structural policy of digital isolation. Accordingly, Chatham House spoke in early 2026 of a “new stage of digital isolation”.

10. Conclusion

As of July 7, 2026, the evidence suggests that Iran’s National Information Network should be characterized as a controlled digital domestic infrastructure with selectively regulated external connectivity. The new findings since the previous version lie less in a new official progress figure than in the more precise description of how it works: stealth blackout, blocked-by-default, dual-tier whitelisting, digital stratification, and a hybrid reconnect model in which even after partial restoration, traffic and the usability of key services remain significantly below previous levels.

For this reason, the common question of whether the NIN is “finished” is analytically only of limited value. What matters is not completion in a planning sense, but whether the system fulfills its political core purpose. And this can now clearly be answered in the affirmative: the Iranian state today has far-reaching means to limit global connectivity, selectively maintain domestic communication, and distribute access according to political, institutional, or functional priority. The NIN is therefore no longer merely technical infrastructure, but a central component of modern authoritarian rule in the digital sphere.

Sources

• ARTICLE 19: Tightening the Net: China’s infrastructure of oppression in Iran, February 9, 2026.
• Chatham House: Iran’s internet shutdown signals a new stage of digital isolation, January 23, 2026.
• Filterwatch: The Digital Frontline: Tiered Internet, Infrastructure Control, and Information Warfare in Iran, March 6, 2026.
• Filterwatch: Iran Internet Shutdown Reporting (January 2026) / Resilience Amid Isolation in Iran’s 2026 Shutdown (PDF), March 2026.
• Filterwatch: The Illusion of Reconnection: Iran’s New Hybrid Internet Shutdown Model, June 1, 2026.
• Freedom House: Iran: Freedom on the Net 2025 Country Report.
• IRNA: پیشرفت شبکه ملی اطلاعات به ۶۳ درصد رسید/ پوشش ۸ میلیونی فیبرنوری, June 27, 2024.
• IRNA archive: میزان پیشرفت شبکه ملی اطلاعات بررسی و اعلام می‌شود/ آخرین آمار ۵۹.۱۸ درصد, archive note, accessed July 7, 2026.
• ISNA: اینترنت باکیفیت حق مردم است, April 28, 2026.
• ISNA: شبکه ملی اطلاعات در امتداد ارتباطات بین‌الملل است, May 18, 2026.
• ISNA: هرگونه قطعی اینترنت «زمان‌دار» خواهد بود/ استفاده گسترده از فیلترشکن‌ها به چالش حکمرانی تبدیل شده است, June 9, 2026.
• Miaan Group / ASL19 / IODA: Report on Iran’s Blackout of the Global Internet, October 6, 2025.
• U.S. Department of the Treasury: Treasury Sanctions Iranian Company Aiding in Internet Censorship, June 2, 2023.