>> The first is to completely isolate Russia

I've been puzzling over how to deal with Russia's interconnections with the Internet. I would hope that, at a minimum, anything passing through an international border gateway that traffic to/from Russia is being at least copied and sent to something like Prism/Carnivore (DCS-1000).

So, we wait for a cyber-attack on our infrastructure and then - do what? Our options range from 'nothing' to a moderately complete physical air gap, which was an impossible lift back in 2016, but with Russia a pariah, it's more feasible now.

Given that congress, even though there's bipartisan outrage over the Russian invasion, has been unable to pass anything in response, I'm not at all hopeful that we can make any pre-emptive moves.

Thinking it through, I would expect Russia's response any restriction in interconnects to be sabotage of undersea cables (they've had the tech to plant bombs along cables since the 80s, but probably not at depths past 200m). If you look at the cable map I've linked, you'll see huge exposure even if you ignore anything past 200m - but also massive redundancy.

If they manage to completely sever any landing points, there are also geo stationary relays (but using those means lower throughput and longer packet response times).

Just spit-balling here, from the viewpoint of someone who's been doing data comms since the mid 80s...