A Guide to bypass the Great Firewall of China

2 Comments | 2024年05月28日
翻墙与科学上网指南

Wall mother continues to track the wall technology, long-term attention to VPN, SSR, WireGuard, Blue Lantern and other technologies, for readers to recommend the latest and best use of scientific Internet methods and tools. Although the author lives overseas all the time, but because of the need to study and work, often need to go back to China, each time back to China is the most worried about the problem is to go back after the smooth access to the extranet, so this kind of software is particularly concerned about the computer and cell phone is loaded with a dozen or so paid APPs all the year round in case of emergencies, thanks to the domestic friends in the cities of Shanghai/Guangzhou/Xi’an/Chengdu and so on to help me test. In the past few years, it has become more and more difficult to climb over the wall. At present, it seems that VPNs and encrypted proxies are still the mainstream, and they are also the type of scientific Internet tools that this site has reviewed the most in the past few years. Some readers commented that VPN technology has long been outdated, why do we still need to use it to flip the wall, in fact, many people do not know, although the name is still called “VPN”, many tools to flip the wall, in fact, has long exceeded the traditional OpenVPN protocol, connectivity and performance has increased dramatically (such as the ExpressVPN LightWay protocol). LightWay protocol), now can flip the wall of the VPN are multi-protocol, the client will automatically switch according to the network conditions, most of the time do not need user intervention, so for the majority of non-professional users, VPN is still the first choice to flip the wall.

Long-lasting Over-the-Wall and Scientific Internet Program 2024Latest

Long-term scientific Internet access, 365 days a year, 24 hours a day without disconnecting from the Internet, you must ensure that “at any time” there is at least one tool to connect, even in the most stringent control of the network period of time to connect for a short while, can help you to complete the necessary updates, greatly improving your ability to survive within the firewall. Now there is no scientific Internet tool or method on the market to ensure that “anytime” can be connected and “never disconnect”, this article recommended is no exception. The only way to truly “always over the wall” is to always have more than one software and channel, and change one if you can’t use it.

The vast majority of people, especially computer novices

  1. If you have enough budget, you can consider AstrillVPN, which is currently used by many foreigners in China. this VPN is very low-key, but has maintained a high connectivity rate, according to the feedback of my friends in China, most of the time the speed is also good, the disadvantage is that the device support is not so full, the price is expensive.
  2. If you can buy ExpressVPN, it is reliable to use it to go over the wall, quite a few of my friends in China are using it. Device support is very full ( Windows, Mac, Linux, Android, iPhone, router…) The security is high and the privacy protection is guaranteed. The first two years of this VPN’s connectivity and speed are not fast, but since the addition of the Lightway protocol connectivity and speed increased dramatically, this is my own every time to go back to the country before the tool must be purchased, long-term use of discounts. ExpressVPN provides Hong Kong, Japan, the United States, Los Angeles, Singapore nodes in four, Hong Kong, Los Angeles, Japan’s connectivity and stability of the best.
  3. If you can’t get ExpressVPN or AstrillVPN, you can consider using PandaVPN, which should still be available in China. This should be the SSR-like scientific Internet tool with the most walled nodes, and the paid version provides SVIP nodes covering Hong Kong, Taiwan, South Korea, Japan, the United States and other most desirable lines in mainland China. The practical intelligent mode can only proxy the walled website. The disadvantage is that the privacy policy is not very transparent, I personally feel that it is not suitable for users who are particularly sensitive to the security of Internet data.

Here are the latest recommended wall flipping software that works in China.

Experienced computer users or technicians

  1. If you don’t mind spending a bit of money to save time, you can use a commercial VPN, see the recommendation above
  2. If you do not want to buy a commercial VPN, you can also use open source wall-flipping tools with self-built VPS nodes or paid airports (the latter is recommended), such as SSR wall-flipping + JustMySocks, and for example, the V2Ray/Clash technology is also very popular, there are a lot of airports on the market, but because of the quality of the quality of the airports are mixed, the airport that runs away from time to time, here will not be specifically recommended, experienced wall-flipping users or programmers can naturally find the right airport by themselves.

How do wall moms get over the wall when they return home?

I have basically given up the self-built and free scientific Internet tools, a few years ago in the help of friends tried to build their own VPS SSR, not used two days can not be, do not know how to get the configuration and then give up, although I know that SSR/V2ray/Clash and other tools are good to use, I also know that the spread of a variety of free nodes on the oil pipe and the cheap airports, but there is no help but to cross the threshold of the setup of these tools, do not have a problem is fine, out of the problem is really a face of clueless. If something goes wrong, you’re really confused, and you’re scrambling around.

Free wall-flipping tool is absolutely not going to use, although a bunch of foreign can be down, or dare not use, for fear that security can not be guaranteed, there have been a number of online because of the use of free wall-flipping tool by the network security tea reports, although not necessarily by the tool itself, but do not dare to take risks.

At present, we mainly rely on commercial VPN, Pixel phone is loaded with a variety of APP client, each time before returning home to complete the purchase or renewal upgrade, foreign purchase and download is not restricted, the operation is very easy, and the purchase with a foreign credit card, do not have to worry about the account security in particular, are very smooth. But since the epidemic came has been more than 2 years did not go back to China, because the cost of going back to China is too high, but also because of the fear of going back to their hometowns out of the epidemic.

And a lot of domestic friends through private channels to communicate with the latest wall technology, many of them do not lack of system technology to play chicken field play very well, in general, the two years can survive the commercial software, the ability to penetrate the wall have improved, ExpressVPN, AstrillVPN for example, has significantly improved protocol algorithms, the speed and stability of the visible improvement of a lot, although still not 100%, but also sensitive to the ability to penetrate the wall is not comparable to a few years ago. Although still not 100%, the ability to penetrate the wall during the sensitive period is not comparable to a few years ago, there are friends who rely on SSR, V2ray, Clash special or improved version of the stable scientific Internet access for many years, because of the specific use of not too familiar with the unfolding.

Do technical friends feel disdain for me still use VPN, it is true that the overall cost of using a VPN is higher than using open source tools to match the airport, but in addition to the cost reasons, I currently still feel that the data security of the commercial VPN, the ease of installation and use is more suitable for me.

Tools/techniques I don’t recommend for scientific internet access

Here is a list of currently active (updated within 1 year) scientific Internet technology projects, known to be closed, deleted, and projects that exist on the homepage but have not been updated for a long time have been omitted.

blue light

This site has reviewed Blue Lantern, the Blue Lantern program is still active, but it is basically impossible to go over the wall from China, and is no longer recommended. In addition, the BBC has reported a case of a domestic user of Blue Lantern scientific Internet access accident:

… A copy of the Decision on Administrative Punishment bearing the official seal of the Nanxiong Municipal Public Security Bureau has been circulating on the Internet. The document shows that Zhu used his cell phone to install Lantern Pro from August to December 2018, connecting to his home broadband network to “flip through the wall” to access the Internet, logging in 487 times in the week before he was investigated and punished …

Source https://www.bbc.com/zhongwen/simp/chinese-news-46823319

There’s no way to know for sure if it was a random case, but to be safe we can only assume that the technology it used is no longer safe.

Borderless Browsing

Non-neutral scientific internet tool, not sure it works, but still being updated.

In addition to the fully transparent encrypted proxy based on Microsoft Browser (IE), Borderless Browsing has enabled the newly invented super proxy server connection technology called Eagle’s Way, which is capable of searching and coordinating all kinds of proxy server resources around the globe for users to use with high speed and unlimited capacity, laying the foundation for a free technology platform for the global network.

With Borderless Browsing, users can browse any website as if they were using a general Microsoft browser (IE). Borderless Browsing automatically finds the fastest proxy server in the background and encrypts all browsed content throughout the entire process to an ultra-high degree, with the level of encryption exceeding the International Financial Network Transmission Security Standards.

Borderless Browsing realizes almost all the HTTP-based functions required by users to use the Internet, such as browsing various web pages, posting on forums, registering for web pages, using Webmail, up and down transfer of data, real-time playback and download of sound, images, animations and movies, etc. For more details, please refer to Boundless Browsing User’s Guide.

Source http://www.wujieliulan.com/download.php

Freegate

A non-neutral scientific Internet tool, from the download page is still active and updated, online information shows that it is used in the domestic public security system to climb over the Internet wall, the software is free, but the privacy protection ability has serious flaws. The software is free, but has serious flaws in privacy protection, and is not recommended. It is free, but has serious flaws in privacy protection and is not recommended:

Once installed, Freedom Gate allows users to access this dynamic network without having to constantly search for unblocked servers. As another reminder, even though Freedom Gate uses a range of encryption, privacy cannot be guaranteed.

DIT estimates that Freedom Gate has users in dozens of countries, but Freedom Gate was originally designed and supported to help users in two specific countries — China and Iran — bypass government censorship. Users interested in breaking through China’s “Great Firewall” and Iran’s extensive network controls can be assisted by Freedom Gate.

For example, if a Chinese user visits Google and searches for “Tiananmen Square” it will be very difficult to get results. In contrast, if one visits Google in Sweden, the situation is different. This is because China filters and monitors the flow of internet traffic in and out of China. By using a Freemason proxy server, Chinese users can effectively conceal their identity and location, thereby bypassing firewalls.

Freedom Gate is still flawed. Although Dynamic Web uses advanced technology to constantly change proxy servers and mirror sites, Freemon is still limited in size.

In addition, most of the mirror sites of Dynamic Web are located in Taiwan or the United States. This fact makes it easier for the Chinese authorities to stop Freedom Gate because they know the geographic location.

Also, there have been several instances of counterfeit Freedom Gate malware, rather than software based on a delivery protocol, being downloaded and installed on users’ computers. Since the Dynamic Web releases many different versions of Freedomgate, this can be confusing for users: they have no way of knowing and being sure that the version they are using is the real deal.


Source : https://projects.voanews.com/circumvention/chinese/freegate

Psiphon

As far as I know, Sai Feng can’t be used to flip the wall from China at the moment, and from the blog update record, Sai Feng has probably stopped updating, but in recent years it has spread the discussion in quite a few overseas wall-flipping communities, and I think it’s still worth introducing. Psiphon is developed by a team based in Canada, and can automatically search for available nodes to connect to based on VPN, SSH and HTTP proxies, and supports Android, iOS, macOS, Windows, and is completely free of charge, or you can purchase an accelerated version. The official website is here, and readers interested in the technical details of Psiphon also refer to this guide.

Ghelper (Google Internet Assistant)

Google Internet Assistant is a browser plugin that focuses on Chrome support and is still being updated. The Firefox version of the plugin and the Android APP are also available online, but they have not been updated for a long time and it is not possible to determine whether they were developed by the original authors, so readers are not advised to download the non-Chrome version of the tool.

ChromeGo

Built for Chrome, integrates 9 different wall-flipping channels: clash, clashB, v2ray, v2rayb, v2go, SSR, SS, Lantern, psiphon, all tools are built-in free servers, still updating, Github project page. Personally, I haven’t used it, but looking at the project status, it should still be available, as far as I know, SS, Lantern, Psiphon channel should be unavailable in all of China, but V2ray, some nodes of Clash should be kept available in some regions, which can be used to temporarily flip the wall.

Brook

I don’t recommend Brook because although its project Github project itself is still active, it’s far less popular than SSR/V2Ray/Clash and other technologies in the wall surfing community, the configuration threshold is too high for me, and the one-click scripts I can find are stuck in the pre-2020 era, so I haven’t been using it, and I’m not sure if it’s good or not, this tool may be more suitable for programmers’ community, there’s no need for ordinary users to toss it. There is no need for ordinary users to toss it, SSR/V2Ray/Clash are easier to get started than it, and with a large number of users, it’s easier to search for a solution by yourself when you have a problem.

WireGuard

I’ve written a guide to WireGuard wall flipping, it’s a good technology, fast connection, high transfer efficiency, has been integrated by the mainstream commercial VPN (only the name of a variety of names may not be called WireGuard), but I personally don’t recommend it, I feel that the threshold of the configuration of the native WireGuard is too high, compared to the SSR/V2ray/Clash and other technologies are not so popular, and may also be I feel that native WireGuard is too expensive to configure, and is less popular than SSR/V2ray/Clash.

Trojan

Trojan will be network traffic disguised as ordinary HTTPS traffic, GFW can not globally block this type of traffic, otherwise it will lead to a large area of the site can not be accessed, because the vast majority of websites are now open HTTPS access, so theoretically, Trojan can not be blocked, but readers should not be too optimistic, the Internet is still a Trojan wall flippers self-built VPS was blocked IP situation. The good thing is that Trojan’s anti-detection idea, which is to disguise wall-flipping traffic as common common application traffic, has been adopted by the mainstream scientific Internet tools, but the realization is different. Unfortunately, I didn’t choose Trojan as my first choice for wall flipping tool, mainly because of its high configuration threshold, although Trojan server-side can find a one-click installation method (you can also find other one-click script on Github, but it has been discontinued for a few years, and it is not recommended to use it), client-side support is very bad, compared to the mature SSR/V2Ray/Clash ecosystem, Trojan is currently difficult to find a suitable solution for non-commercials, and it is not suitable for non-commercials. The official Trojan project is updated infrequently, so unless you’re a technical professional, I wouldn’t recommend going over the wall with it. If you are really interested, you can watch some videos to get started.

Any VPS self-built wall-flipping node

I don’t recommend readers to use this way, if you don’t want to buy a commercial VPN, you don’t necessarily have to build it yourself with a VPS, I don’t think this method is reliable in the long run, unless you are extremely lucky and don’t suffer from IP blocking, after all, after the IP is blocked, you have to invest time (and money) in replacing the IP or the server, which determines that the stability of this way of wall flipping is far less than the wall flipping that owns hundreds of thousands of IP addresses. VPNs or airports are better, VPS IPs get blocked quite often, and if you reuse the VPS, then other services running on the server may also be affected. I can’t understand users who have an immediate need for scientific internet access, is it really so cool to have to whore out a wall-flipping node with a free VPS for not spending a dime? Doesn’t it smell good to find an airport with the right price, it’s not like there aren’t any cheap airports.

My recommended way to go over the wall

VPN

VPNs can’t go over the wall? People who favor open source technologies (SSR/V2ray/Clash/Trojan) think that VPN is an outdated technology, not good and expensive. Indeed, GFW can use deep packet inspection technology to detect the frequency closure of traditional VPN protocols, the standard OpenVPN, PPTP and other protocols have been invalidated, ordinary VPNs have no chance in front of the Great Firewall.

However, many people do not know, now on the market to flip the wall of the VPN (which is currently available in China VPN wall software ), has long ceased to be based on standard protocols, but built-in self-developed protocols and other multi-protocols, these protocols have been drawn from the open-source community of the latest anti-detection (WireGuard, Trojan …) The name of the program is still VPN, but in fact it is not weaker than the open-source wall-flipping tool in your hand.

So why do you feel that some VPNs are weaker at flipping walls than your SSR/V2ray/Clash/Trojan? The difference is that the remote nodes of these VPNs are better shielded for GFW, because as many nodes as a commercial VPN can provide are limited at a given time, those behind GFW can easily extract the list of nodes by placing a client, while a host of open source scientific internet nodes are distributed in all corners of the internet, and all kinds of free and paid airports as well as scattered personal nodes are every now and then Add new nodes and be pushed to the client, the authorities can not be efficient blocking, the speed of IP blocking can not catch up with the speed of starting a node, with the help of a kind of one-click script, a new node is too easy to start.

So is it true that commercial VPNs can’t do the job of updating the node list at any time? Not really, first-tier wall-flipping VPNs have implemented a real-time node list encrypted push mechanism, as long as your client can still connect to a node, the remote server will constantly deliver the latest active list information to the client, eliminating blocked IPs, this process is silent and cannot be extracted in the local client.

The price of commercial VPNs is generally higher than airports or VPS (especially for programmers who know how to whore themselves out), but the higher price corresponds to the zero configuration (very full terminal APP coverage) and the convenience of maintenance and updates, as well as with the important security of online data, good VPNs such as ExpressVPN have a mechanism to protect the privacy of their customers, which you won’t find in any airport. Of course, you can find “zero logs” promise on airport websites, but how many of them have been audited by three parties? As a user, you can’t be 100% sure what happens to your Internet traffic when it passes through a tri-party airport server.

In addition, commercial wall flipping VPNs tend to be more comprehensive, basically supporting Kill Switch, Split Tunneling, P2P downloads, and a variety of anti-data leakage capabilities.

Another disadvantage of commercial VPNs, which has been felt more and more over the past two years, is that they are “harder and harder to buy”, as many VPN mirrors with strong wall-penetrating capabilities have been blocked, Alipay/domestic bank card payment channels have been closed, and more and more interruptions have been made to the downloads and updates after payment, which is expected to make the problem worse.

How to choose a VPN?

  • Word of mouth: the probability that you do not have the energy to do their own VPN software comprehensive comparison, it may be worth looking at the online stations (including wall mother) recommendations, is generally recommended in the head of the VPN probability is also good to use, generally not recommended products probability is not available, there is indeed a generally not recommended, but surprisingly good to use the VPN, temporarily miss them you may not lose anything, the stationmasters will be continuously updated, and the VPN is not a good choice. You can keep an eye on it, this site recommended VPN in order: ExpressVPN, AstrillVPN, PrivateVPN, these wall-flipping VPN are my own and many of my friends in China for many years to continue to use the verification of the reliable VPN!
  • Security: you need to pay attention to whether the VPN you are interested in can protect your privacy online, because in China over the wall, this is not just a privacy issue, more about personal safety, these two years in China there have been over the wall of the user due to software defects online exposure to law enforcement cases, you need to focus on these indicators: 1. IP hiding 2. DNS Anti-Leakage 3. Kill Switch capability 4. Logging policies After understanding their significance for Internet security, choose a product that has been triple-audited, which are few and far between, but preferred for
  • Usage: If your main application after going online over the wall is catching up with dramas overseas, you should choose a VPN that not only has enough nodes but also has a large enough IP pool, you may need to consult with customer service about how many IPs correspond to a single server node, and IPs that are too few will not be able to effectively simulate foreign access; if your main usage is foreign games, you have to choose a service that provides low latency nodes (Hong Kong, Japan, Korea, Taiwan); if If your main purpose is to browse sensitive websites, the security function must be guaranteed first; if the purpose is to brush domestic and foreign ordinary sites at the same time, you should focus on the Split Tunneling function.

SSR

The latest ShadowSocksR server and mainstream device clients are actually maintained by a project called ShadowSocksRR (often called SSRR), here is its Github link. It is currently the most mature self-built wall-flipping technology, in the domestic Internet users, especially programmers have a very wide range of applications in the community, randomly find a few coders, glance at their work laptop, you will notice the “small aircraft” icon in the taskbar. If you want to get into the pit, you can watch the video. I’ve written about it in detail before.

SSR clients are very full: Windows, Mac, Android, iOS, OpenWRT can all download reliable clients. Airports are extremely numerous, from well-known foreign airports JustMySocks to unknown domestic people opened, every now and then there are new airports appearing in the major airport recommendation sites, every now and then there will also be news of the airport run, the market is very chaotic and active, but there is never a lack of cost-effective services, you can also self-build nodes, but there is a risk of the IP being blocked and trouble, Hong Kong and foreign cheap VPS There are many choices, self-built SSR nodes tend to have the lowest cost, even if they are blocked, it is convenient to change IP or change host, many VPS hosting providers provide IP change function. If you are lucky, the IP is not blocked, a single host can be used for several years, and this way because of decentralization, sensitive periods can escape the Internet bulk blacklist, a good example is the annual National Day things China Internet tightening, when many commercial VPNs are hung up, self-built over the wall users are only a little affected by the speed of the connection, but the connection is still relatively more stable. Theoretically, there is no possibility of privacy leakage on your own server, unless the server is hacked or the application itself is maligned.

Because based on the SOCKS5 protocol, SSR connection speed fast transmission efficiency, and can be opened as a local proxy, shared with other devices on the same LAN, very convenient. But SSR (as well as other open source scientific Internet technology) shortcomings are also obvious: chiefly because the protocol is open source, theoretically broken by the GFW is sooner or later, the day was parsed out of the traffic characteristics of the SSR’s death, open source code may be unstable, there is a risk of code infiltration; the lack of a mature integrated and user-friendly deployment program, the server needs to be installed in a certain amount of manual configuration (even with the help of one-key script help), client interface usability than commercial VPN software is also still a distance, so at present SSR is also mainly popular in the programmer community.

V2Ray

Although the author of V2Ray has been silenced for many years, the official website has not been closed, the derivative project consistently maintains a high frequency of updates, as can be seen from this V2ray one-click script, because the client support full update fast, greatly reducing the use of ordinary wall users threshold, all V2ray has a large user base, the airport is also extremely large, want to get into the pit of the friends can start from the oil pipe video.

Clash

Clash is another popular scientific internet client project, the developer should be abroad, the official project is not affected and the project stays active and updated. Client support is very good: Windows, Mac, Android, iOS, OpenWRT and other clients are easy to get. It can import airport subscriptions for SSR/V2Ray/Trojan and other protocols with one click, so it applies to an extremely large number of airports, and those who want to get into it can start from the Yau Yee tube video.

Geph (Mistletoe)

The earliest in a foreign forum to see this tool, the Internet rumors can be very useful, but individuals do not use, do not know much. Only from the official website to find limited information, readers note that this type of software because of the risk of its existence, must be careful with the official disclosure of their own information. From the official website, we know that Misty Pass is headquartered in Estonia, subject to European privacy regulations, the use of self-developed technology to protect the ability to penetrate the wall and user data security, the commitment to seal a few days to compensate for a few days (from the user forums can not be done to 100% over the wall protection). Support Window 7+, macOS 10.10+, Linux amd64, Android 5.0+, currently does not support iOS (readers need to refer to: iOS wall guide ). The free version can support browsing web pages and other applications, high-speed services need to pay, for 5 euros per month.

Overseas cell phone card international roaming free over the wall

It is to take the foreign cell phone card back to domestic use, through the international roaming, free of wall access to the Internet, the overseas party can be or domestic have the means to get a foreign card of the crowd can be considered, the Internet can indeed check the success stories, but I also see this post, perhaps this method is a hidden worry. International roaming rates are generally much higher, I checked the roaming rates in China of the four major carriers in Canada: Rogers Wireless / Bell Mobility / Freedom Mobile / Telus Mobility, they are not cheap, especially the packages billed by traffic are more difficult to adapt to the long-term use of the vast majority of Chinese wallets in Canada can not stand it, but occasionally check an important email. Most of the Chinese in Canada can’t afford it, but it’s still useful for checking important emails once in a while. I think those who are interested in this method can consider Google Fi, roaming covers China (US, Canada, and Mexico roaming charges are waived), monthly packages are suitable for long-term use, and the rate is only slightly more expensive than the US carriers as far as I know, and there is an unlimited streaming package, which is also suitable for China, so feel free to be a tycoon, and I’m thinking of getting Flexible myself.

Overseas life to return to friends, if you do not want to buy software over the wall, it may be worth consulting the local country operator, or Google “operator name + roaming zones” to confirm whether roaming from mainland China and the specific tariffs, if you find cost-effective packages, it may be worthwhile to leave a message in the comments section and share it with you. If you find a cost-effective package, please leave a message in the comment section and share it with us. Another question I am more concerned about is how fast is the Internet access speed of this method, and whether the international roaming will be very slow and limit the experience of using high-traffic apps, and please ask friends with experience to advise.

Is it getting harder to get over the wall?

2019 back home that time I was impressed, the old home over the wall is extremely annoying, check a Gmail have to toss for hours, repeatedly and repeatedly connected to barely connected to a flip out, a few minutes and disconnected, simply torturous. But recently and a lot of domestic friends and acquaintances to communicate, the unanimous feeling that after 2020, turning over the wall in a sense is becoming harder and easier, and for the old users, in fact, easier.

What has become harder is obtaining the first tool, which is becoming increasingly difficult to purchase and download from the country.

A few years ago, the head of the vendor’s VPN mirroring station, one can survive for weeks and months. Now, it is good to survive for 3 days; a few years ago, every city in China opened a mirror station like opening Baidu, registration, payment, download and installation of no one cares, making netizens think that the national wall is not serious; now, get a temporary domain name that can be opened, shivering and shivering and paying the money under the APP, feel like doing nine deaths of the underground party, many times you have to rely on the surrounding old users to help a hand, “to If you want to turn over the wall, please turn over the wall first” is the helplessness that started only in these two years.

Another thing that’s gotten harder is the fact that Chinese VPN users can’t use Alipay or WeChat to pay for things, and while many VPNs worked a few years ago, now they don’t; forcing people to use credit cards, which are much less popular in China, and PayPal, which is even less popular, and cryptocurrencies, which are played by very few — and that’s what I’m deeply concerned about. More on that later.

The short answer is that it’s getting harder and riskier for wall-flipping newbies to get tools.

Become easy is the scientific Internet software in the past two years, technology upgrades, especially since WireGuard appeared, was utilized by many manufacturers, so that the industry’s products overall ability to penetrate the wall has been jumped up.

ExpressVPN, for example, launched a period of time before the self-developed Lightway protocol, dead slow connection speed, extremely low connectivity, extremely high drop rate, once let me feel that it will not work; and the launch of the Lightway protocol, not only to get and airport tools to match the seconds to connect to the speed, disconnections have also become very difficult to encounter, and then back to the top of the Chinese VPN that can be used at that time.

As far as I know, almost all VPNs on the market nowadays support multi-protocol, you can see all kinds of magic OpenVPN protocols in the software configuration panel or on the official website, as well as Lightway, Nordlynx … and other strange terms; most of them are developed by commercial companies for the emerging encrypted communication technologies (such as WireGuard). The vast majority of these are secondary developments by commercial companies of emerging encrypted communication technologies (e.g. WireGuard), and so on.

Because the ability of wall-flipping tools to penetrate the wall has jumped up, I don’t know if you’ve noticed, but the number of working Chinese VPNs has been on the rise in the past two years, and although the overall number may still be no more than double-digit, it’s much better than the predicament of a few years ago when there were a whole lot of scientific internet science websites, but almost no apps available.

Comparatively, the Great Firewall’s shielding ability seems to have stagnated over the past few years, and I wonder if it’s because Fang didn’t try hard enough, at least, as of mid-2022. Maybe the great GFW technology has peaked.

So for the old wall-flipping users, scientific Internet access is not more difficult in these years, instead, there are more choices of tools, more powerful tools, and it is easier to flip the wall.

But maybe it’s temporary.

I wonder what GFW would do if it could no longer raise the wall by technical means.

Perhaps it will turn to non-technical means to suppress Chinese netizens to go over the wall, this means seems to have been the first hint, that is, to prohibit commercial companies to access the domestic payment channels, you are now difficult to find the acceptance of WeChat Alipay to go over the wall of the company, here to say a word, if you see any scientific Internet software to accept WeChat Alipay, I strongly recommend that you do not buy it! Close your browser quickly!

For example, although more and more software developers are offering no-email registration, the payment step still requires personal information, which is highly likely to be compromised; the vast majority of ordinary wall-flipsters in mainland China are unlikely to use cryptocurrencies and do not have foreign credit cards, so they can only buy them with their Chinese bank cards as a fluke.

Some companies keep the UnionPay card, but I feel that it is a trap and very dangerous, and I will repeatedly remind users on this site not to pay by UnionPay card, for reasons you don’t need to explain.

Credit cards are unlikely to be banned, but is it safe for domestic banks to issue multi-currency payment credit cards with VISA/MASTER markings and payment records that are estimated to be unable to be excluded from Chinese regulation? I do not know, still have to observe. PayPal is also common in the payment interface, PayPal China and the Chinese government in the end what is the relationship between the Chinese government, will not betray the user, can only say to remain vigilant.

Sometime in the future, will users who use these means of payment to go over the wall suddenly receive a text message to report to the Public Security Bureau and receive education and intimidation together? Will the government have already begun to collect data on the utilization of financial settlement systems and start brewing the idea of massively and precisely punishing tens of millions of ordinary Chinese people with scientific access to the Internet?

Fine thoughts.

Why do walls exist?

We can’t deny the existence of “hostile forces outside China”, nor can we turn a blind eye to the malice of some Westerners towards China. Having been abroad for years, I have long been immune to certain foreign media, whose paranoia can be smelled through the screen, and it’s a topic that can’t be exhausted, so interested readers may want to read this Quora link.

However, I know in my heart that no fly can bite a seamless egg. Over the years overseas, I have lost count of the number of grievances voiced by “internal forces” just from the oil pipeline, and I may as well search for ” demolition and relocation ” on Youtube to see a large number of such grievances. Who can tell me that the sufferings of these individuals are all maliciously fabricated by forces outside the country, and who can tell me that their tears and suppression are fake? Compared with the lengthy speeches of the English media, perhaps the authorities are more afraid of the ordinary Chinese people to see the cries and despair filmed by cell phones, every time I read it, my mood is incredibly depressing, every time I have the idea of leaving Canada to reunite with my family at home, I think of what happened to a certain ordinary Chinese person who was exposed to the oil pipeline, and then again, I dismissed the idea of going back to my home country, and I would rather live a lonely life in foreign countries and work a little harder, at least I can have a minimum of human dignity, and I don’t have to worry about the power of one day. Dignity, I do not have to worry about one day the iron fist of power suddenly hit me, so that my family instantly lost their homes, lost their freedom, and even lost the right to live, not lost today will also be lost tomorrow, not in my generation, but also in the generation of my children will be lost, touch the iron fist there is no reasoning, can only be obedient to the willingness of the fish and meat, the meaning of human life in? What is the point of living? I sometimes wonder, if I had a child, if I had born it in China, would I hate myself for bringing it into this world.

Why does the wall exist? I don’t think it’s necessarily to shield us from anti-Chinese forces outside the country. Many of the truly purely anti-Chinese media outlets that I know of are also crude, and it’s not hard for ordinary Chinese to tell them apart even when they see them, even though they’re very popular with ordinary people in the West, and these Western media outlets are really reporting on things that, as a certain foreign affairs spokesman once said, would only make the Chinese people more patriotic.

What the wall blocks out is the tears, resentment, and despair of countless real ordinary Chinese people, who are treated like cattle, whose throats are cut, who can’t say anything, but can only go to the foreign media to tell of their humiliation, and accuse their persecutors of being powerless to fight back; what the wall blocks out is the darkness that pervades the lives of the Chinese people, and the cruel truth about being Chinese: in fact, you don’t have anything at all, and whatever you have today may be taken away from you by the power, and snatched away by the evil people in the name of power. Whatever you have today, it can be taken away at any time, taken away by the power, taken away by the evil people in the name of power, and as long as they want to torture you, you can die at any time. The regime is definitely not on the side of the people; it is on the side of its own interests, on the side of the privileged class. Ordinary Chinese people who are unable to climb over the wall are harboring illusions and hopes, oppressed but kneeling down and begging for justice from their oppressors, they don’t know it, and they don’t have any choices even if they do know it.

You can say that the wall is the Great Wall of China against foreign opinion wars, you can say that the wall is the guarantee of China’s Internet sovereignty, you can say that the wall is the moat of China’s Internet market, and you probably can’t deny the fact that the wall is a low-cost stabilizing tool to maintain the false hope of the vast majority of the Chinese people, so that their grandchildren can live in peace and prosperity, you can’t deny the fact that the majority of the people of this nation have cut themselves off from the world, and that they no longer know what a more dignified life is, or that there are other possibilities. Their children and grandchildren can no longer know what a more dignified life is, or that there are other possibilities for life. If I were a “hostile force outside China”, I’m afraid I’d be protesting China’s Internet control policies on the surface, while privately celebrating: China doesn’t need us to subvert and destroy it, because it’s going to strangle itself by its own throat, gouge out its own eyes, and cut itself off from the world. It will gouge out its own eyes and cut itself off from the world, and it will decide not to make any progress and slowly rot away.

Is it illegal to go over the wall?

Chinese law

Only officially licensed VPNs are legal, all others are illegal — that’s what the Chinese law says. Officially licensed VPN channels are only in the hands of a few major state-owned communications carriers, the price is expensive, the ordinary domestic enterprises can not afford to use, the domestic power system within the system of buddies privately broke the news, their units in a second-tier city of two buildings connected to a certain pass VPN; my address book of thousands of people, familiar with the unfamiliar, I have never heard of any individual to use these “special offer” VPN I’ve never heard of any individual using these “special” VPNs, so it’s obvious that these services are not open to individuals at all.

It’s illegal to go over the wall, but you have to, you can’t help it.

Now the red line

From the actual cases that can be found on the Internet, the red line for scientific Internet users in the country should now be summarized in two words: dissemination.

Developing and sharing scientific Internet technologies

Case 1: Shadowsocks author clowwindy teared up and abandoned project, ShadowsocksR (SSR) author threatened

Case 2: GoAgent author-developer Phus.Lu forced to delete project

Case 3: V2ray author Victoria Raymond disappears from the web

Case 4: Former Amusing Base Station Manager (Author of One-Click SSR Wall-Flipping Script) Sun Dongyang Arrested

In the past few years, people who have the ability to develop scientific Internet technology, jailed in jail, out of the country out of the country, recluse recluse, for open source wall-flipping project branch of the long-term availability and security, I personally do not hold any hope, 2 years ago, I no longer use these means of wall-flipping, I recommend that readers of the derivatives of the project to be more wary of, you do not know what these developers come from, and also can not be sure at all, be careful to use! If you are a skilled technician currently living overseas, unless you have successfully flipped the wall in person, or do not plan to return to your home country in the future, you are also advised not to touch it.

Selling wall-flipping tools

There are quite a few events/cases that can be Googled:

All are real cases, because the websites and software involved were withdrawn or shut down is directly observable, and several of those involved have since clarified. There are even people on Knowledge even jailed for selling hosts because the business under their name sells servers in Hong Kong, which were bought by a large number of customers for wall-flipping, eventually leading to the company being shut down and the person in charge being sentenced to one year’s imprisonment. If you are brewing a wall-flipping business, unless your whole family has emigrated overseas, I urge you to stop. Just, I personally can’t understand why someone would buy and sell wall-flipping tools on Taobao, obviously looking for tea, it’s just so ignorant that it’s mind-boggling.

Posting “sensitive” words and actions over the wall is just as dangerous in the foreign media.

Concerns about the future

Is the Chinese government capable of punishing hundreds or tens of millions of domestic wall flippers at the same time? Before the epidemic, while I couldn’t objectively rule out this possibility 100%, I was able to remain subjectively optimistic. At that time I thought that even if it wasn’t arrests but just fining a few million people would be a huge and lengthy law enforcement project, and if it was arrests, it would be even less economically feasible, and I don’t think the Chinese government could ignore this political cost unless he really wanted to completely disassociate China from the world and go back to the Dark Ages, and purely from the point of view of the cost of enforcing the law, at that time I thought that, in this case of wall-crossing “The law is not responsible for the people”.

After the epidemic, I changed my opinion, especially what I learned about my friends during those months in Shanghai when the city was closed, and the occurrence of the red code incident of the rights depositors in Henan (the accountability situation ), which made me extremely pessimistic. Because as long as any official name (such as epidemic control) can be forced into any resident’s home, he can come in to exterminate or come in to forcibly take away your computer and cell phone. Since he can give them the red code today, he can give the red code to any Chinese who outputs “inappropriate words and behaviors” at any time. He can let you die socially in China at zero cost, without the police coming to your door, eliminating all the processes, just move the mouse, and think of the horror, and you can imagine how efficient and brutal the domination machine will become, with a single code. One code can threaten everyone around you, or force them to become your enemy.

The cost of giving a Chinese red code is zero, the cost of giving a red code to 10 million Chinese is still zero, and my technical friends tell me that the difference between the two is only the number of rows in the Excel file of the ID blacklist that the official provides to the security code maintenance unit. The future of domestic surveillance to the wall, if the rulers have actually gained zero cost “blame” ability, we can only pessimistically think that the worst outcome of that happened, perhaps only a matter of time. Maybe the Henan saver red code is just a test, and after the test is over, I’m really afraid that one morning my family in China will wake up to the news that the health code has been officially renamed as the security code (or maybe it’s called the social code, the people’s code, the Chinese code …) and will be there forever. And it’s here to stay in perpetuity.

Wall flipping for the average person is still most likely safe

If you do not have any speech output on the scientific Internet, but just use Google to poor information to facilitate the writing of a homework, go to the tube to watch a UP video, use Gmail to send and receive emails, go to Netflix to catch up with a drama, in the United States, Japan and Asia nautical nautical nuggets, and even go to the P station to watch a film, even if you occasionally go to some sensitive sites to shop a little bit, as long as you have a reliable enough software to flip the wall, the probability of you do not need to worry about because of the scientific Internet The problem of personal safety is brought about by scientific Internet access.

Can you track the IP over the wall?

A wall-flipping tool that can track the original IP is not qualified, in the early years of many pure proxy tools because of the configuration is not right, there are many cases of leakage of the customer’s original IP address, this kind of proxy software will automatically forward the user’s original IP by default, and maintenance of the technicians often forget to turn off this function. VPN class and these years of open source wall-flipping technology has basically eliminated the IP leakage, you can rest assured that the use of. Whether the IP address is leaked after flipping the wall is very good to detect, you can open the website ipinfo.io to see the current IP, generally you will see the IP address of the remote server you are currently connected to, which may not always be the same as the address displayed on your wall-flipping client, it’s okay, because the IP is mobile, and the database of the IP address detecting website may have a lag, as long as the display IP As long as the displayed IP country is consistent with the node that the client is connected to, it means the IP address is not leaked, because if there is leakage, the IP address detection website will show the IP location as China.

Third-party websites don’t know your real IP, it doesn’t mean that your wall-flipping service provider doesn’t know it, because your Internet traffic originally passes through their servers, they know 100% of your real IP address, so to a large extent, whether you flip the wall to surf the Internet is ultimately safe or not, it depends on the service provider’s data confidentiality (and willingness), for example, good VPNs don’t store the customer’s real IP address and related records, in order to be convincing, vendors will ask a credible third party to audit independently, not so good service providers don’t know. For example, good VPNs don’t store customers’ real IP addresses and related records, in order to be persuasive, vendors will ask a credible third party to audit independently, not so good service providers don’t know, although all vendors’ official websites promise that they don’t record any customers’ information (including IP addresses), but in the absence of three-party auditing, no one can be sure that it’s true or false.

The Chinese network operators that provide you with Internet access services know your real IP address, and the entire Chinese domestic network routing system also knows your real IP address, in fact, they are also very likely to know that you are “going over the wall”, except that they may not be able to know exactly what websites or applications you are accessing, and it’s even more difficult to know what information you have downloaded or uploaded from these places, but in any case, the data flowing from your real IP address (given to you by the ISP) is all under their noses. It may not know exactly what websites or applications you are visiting, and it is even more difficult to know what information you are downloading or uploading in these places, but in any case, the data flowing from your real IP address (given to you by your ISP) are all under their noses, and they can’t accurately locate what you are doing, but they can be quite sure whether you are surfing the Internet in a normal way or surfing the Internet over the wall, which is the basis of the official ability to control the network and massively limit the traffic flow of “over-the-wall” in a large scale during sensitive periods. This ability is the basis of the official control of the network in sensitive times and mass restriction of “over-the-wall” traffic.

How can I surf the Internet as safely as possible for science?

Use a reputable scientific internet software from abroad

A tool that won’t betray you (whether intentionally or unintentionally) is the foundation of all online security.

  • Use foreign reputable wall software, even if it is expensive and difficult to buy, after so many years of wall, the law is still “a penny a penny”, expensive really have expensive reason, believe it or not, with you; the other is that the more difficult it is to buy a tool to access the Internet, to a certain extent, it also proves that the more worthwhile to buy it, the best commercial scientific Internet tools, all of them are the key GFW banning target, so the authorities will only become more and more difficult to buy, this type of increasingly difficult to buy scientific Internet tools tend to maintain the technical means to block the access channels, and can always be updated. The best commercial scientific Internet tools are all key GFW targets, once installed successfully, it is difficult to shield through technical means, can always be updated, so the authorities will be from a non-technical point of view to tightly control access to the channel, it will only become more and more difficult to buy, this kind of more and more difficult to buy the scientific Internet tools tend to maintain the industry’s most wall of the wall of the secrets of penetration.
  • Free tools must be careful, rumor has it that some domestic netizens have been arrested for using the popular “Old King Free VPN” in the past two years, although I haven’t used this software, in fact, 99% of free wall flipping tools I don’t use, but in the past few years, I have heard of “Old King VPN”, which is very popular in the Android official store. “I have heard of it, it is very popular in the official Android store, and it seems that its usability does not need to be questioned, but there is no way to know its safety, because it is free software, and the ability to protect the user’s data security and privacy protection can not be assured; many users may not be able to imagine, in fact, the development of a “can be used” of science! Many users may not be able to imagine, in fact, the development of a “usable” scientific Internet tool is not as difficult as imagined, any know any kind of self-driving over the wall of the method of technical personnel can potentially do, so this kind of software can help you “free over the wall” will be endless.
  • Beware of “Chinese-only” software, beware of “Chinese-only” software that lacks an overseas market, it is impossible to determine whether they are phishing or not based on the language alone, but if a scientific internet software is only targeting the Chinese language market, its probability of phishing will be higher than similar software that operates in a multinational and multilingual market, which means they may be more dangerous. According to my personal observation, most of these programs are still mostly “free VPNs”, but I can’t rule out the possibility that there are such “paid” programs in the market. Remember, reliable commercial wall flipping tools don’t operate only for the Chinese market, they must be highly internationalized apps.
  • A reputable foreign scientific internet software has at least the equivalent of: 1. encryption and crack resistance 2. Traffic obfuscation counter-detection capability 3. Multiple anti-data leakage protection functions 4. A high level of personal data protection service guarantee, with such software online, you at least basically do not have to worry about the risk of purely technical or service error

Anti-surveillance, de-nationalization of electronic equipment hardware and software

The monitoring software produced by the state can be called “National Anti-fraud Center Protection APP” today, or “National Minors’ Internet Safety Protection APP” tomorrow, or “Chinese Citizens’ Electronic ID Card/Health Code APP”. APP”, no matter what it is called, you and I know very well that they are all monitoring APPs, only that we ordinary non-technical users are not capable of analyzing and determining to what extent these APPs are “monitoring”. We don’t know, but once you install this kind of software on your device, it’s not up to you to decide what they do.

Chillingly, there is no company in China that can be independent of the government’s unlimited supervision, every Chinese company can be “nationalized” overnight, and every software developed in China can become a tool for national security overnight. In the future, the one who betrayed you may not be the “national” apps I listed earlier, but may be the 360 security family bucket in your computer, a popular Chinese browser, a popular Chinese online game client, or WeChat, Alipay, your Mijia app, Nail office software, B station client, car 4S store’s APP, Jingdong/Taobao/Tmall APP … As long as the Chinese government requires a simple monitoring device to be embedded in any of these apps, all of your online behavior will be invisible, so what power do you have to stop the government from doing this?

People who really care about the security of wall-flipping must understand the importance of de-localization of the whole device, some of the following suggestions may seem extreme to ordinary wall-flipping users, you can skip them, these suggestions are compiled by me to those who need an absolutely safe Internet environment for Chinese netizens and friends:

  • Cell phones: do not buy domestic smartphones or all overseas cell phone models with Chinese background, use foreign models made by SamSung, Google Pixel, Apple, etc.
  • Computers: do not buy any desktop or laptop that may have a Chinese background, use foreign models made by foreign manufacturers
  • Operating system: If you can not get foreign models of the machine hardware, at least try to uninstall the domestic manufacturers of pre-installed desktop or cell phone operating system, from abroad to download the pure version to install, which requires the user to have a considerable amount of professional knowledge of computers, it is recommended to consult the side of the technical friends!
  • Browser: Do not use any domestic browser, use Chrome, Firefox or other foreign reputable browser, be sure to download from the official website, do not download from any three-party Chinese download site.
  • Isolating the Chinese software apps that have to be used: it is difficult to go completely de-localized, and for many people, it is almost impossible not to install WeChat Alipay on their phones. Without being able to completely get rid of the domestic software, the only reliable way to ensure that you are not monitored may be to use separate devices, and to use WeChat Alipay and the other ones normally in a low-security, domestic device/Chinese operating system/pre-installed software environment. All the applications you need, and use the sensitive applications on another completely de-localized device.

If you are in China and need a 100% absolutely wiretap-free local internet environment, you should assume that all domestic software is listening, and all Chinese software can be monitored, no matter if it is WeChat/Alipay, or 360 browser, or even the so-called overseas version of Shakeology (Tiktok). You should clearly realize that no Chinese or Chinese-backed company is an exception to regulation in the face of absolute power, and you should do your best to segregate apps on devices that are used for wall surfing and those that are not, and follow the strict discipline of segregated use.

Overseas Account Security

You don’t need me to remind you what not to do on domestic social media – that’s common sense for anyone living in China. But don’t assume that you have “freedom of speech” when you’re on foreign social media, as there are examples of domestic Twitter users who have had their water meter checked because of their comments:

Here’s the link I was able to find online:

Judging from the density of cases, Twitter seems to be the hardest-hit area for overseas social media to check the water meter, and the inferences on the Internet are all speculations (but recent reports seem to be confirming the concerns of many people), so it is recommended that highly sensitive people who are in the country should be cautious in registering for the use of Twitter.

There’s no such thing as a perfect wall, and what’s a sensitive period?

No single wall flipping software can guarantee successful wall flipping during sensitive times. Even the top tier VPNs can’t do it, they can only manage to be available more than 95% of the time throughout the year, and they all share the same problem during sensitive times.

In the early stages it starts to drop frequently, changing nodes doesn’t help, and even if it does connect, it will inevitably drop (multiple times) within half an hour and take a long time to reconnect. In the middle of the process, there are no nodes to connect to, no nodes to connect to, and the service becomes completely unavailable. Vendors usually release emergency versions for the Chinese market, but if your device only has the current Scientific Internet Access tool, and you don’t have a spare, you basically won’t have any hope of getting the client updated. If you have a backup software, there is often hope that the client can be updated, but even then, the speed of the Internet over the wall will not be fast enough, which you can’t solve because the entire Chinese Internet traffic to the nodes outside the country is heavily censored, and the speed will therefore be reduced dramatically.

My expectation is that you should not expect a particular tool to leave you high and dry, and that you will most likely need to be prepared for multi-technology types and multiple scientific Internet tools.

The so-called “sensitive period” is the Internet tool specific failure of the period, the sensitive period of almost all attempts to access the Internet will be broken, all the software will be subject to confinement, can not be connected to the speed of extremely slow, frequent disconnections and other problems centered on the emergence of these times basically China’s Internet is in a “military martial law These times basically China’s Internet is in a “military martial law” state, information entry and exit extremely unfree, is technically a national LAN, each sensitive period can last about 1-2 weeks after the restoration, we can all like nothing has happened like over the wall scientific Internet.

Every year during the Spring Festival

Every year the Spring Festival network will not be too good, in order to ensure peace and tranquility during the Spring Festival festival, your wall-flipping software will become very uncooperative, it is recommended that at this time more relatives and more door to door to accompany mom and dad to do good food, the Spring Festival a day you go back to work in the city, you will find that the network is actually very smooth.

During meetings in early March each year

This is the central meeting time, basically do not go outside the network, especially during the two sessions of the tight, the first line of the wall VPN and the vast majority of commercial scientific Internet tools will be completely hiccups, basically no nodes can be connected. Only a number of more hidden private self-shelf servers can still barely connect, but generally also slow and pathetic, disconnect disconnect you hammer head loss of energy. At this time it is still recommended to reduce the Internet, watch more CCTV live, concerned about national issues, seem to understand and your male colleagues to sit down and talk about jerking off is better.

Early June each year

One of the Westerners’ favorite holidays for China is called the June 4 Memorial Day. Terrorist radio stations in the US, UK, France, Germany, Australia, Russia and even the Middle East will repeatedly broadcast photos and video footage of the so-called “brave tank people”, and all social media push systems will come out to stand up for each other. This is the treasure of Western public opinion, and it’s hard for our government to beat a hundred mouths with one mouth, so it simply shut down the Internet. If you are interested in the history of June 4, please take a look at this video. This student surnamed Chai encouraged everyone to rise up and rebel, made others bleed, and fled to the United States herself, recognized Americans as her father, and lived a free and democratic life, so that we should never forget her. This is a Youtube page of June 4 Truth, but unfortunately they are all in Chinese, and the so-called “democracy fighters” in the West only understand English reports.

Every year during the National Day

With the seven-day National Day vacation, you’ll probably be off the extranet for a week or so. Generally from the last one or two days in September can not be normal wall, until October 5, 6, the way. It is recommended that this time to drive a long trip, because the National Day when the highway is “free of charge of the scenic route”, you can also do the dead house, after all, is not the Spring Festival, takeout as usual, Taobao Tmall Jingdong discounts every day, the motherland long a year, you also fat three pounds.

political emergency

No one can predict when these kinds of events will happen, all we know is that if it’s not at the above time and we suddenly realize that we can’t get over the wall, then something must be going on. We don’t know what it is, but my own first judgment is “I don’t know where a new Western offensive against us has begun”, or if there is another problem within our party, or if there is another security incident somewhere. The best thing to do at this point is to “wait”, usually after a few days, the network will be restored, and we Chinese can go on with our lives again as if nothing has happened: working overtime, making money, eating, eating, eating, eating, not falling in love.

Review of the speed and stability of wall-flipping nodes in various places

A reliable scientific Internet software can provide unlimited wall-flipping nodes in the long run, not limited to countries and regions, as long as you can connect, fast speed, is a good node. General low-latency, relatively good wall nodes are mostly concentrated in Hong Kong, Taiwan, Japan, Singapore, South Korea and the United States (West), which is close to the mainland China network exit point, not excluding some of the colder cities can occasionally connect, but the general speed is not ideal.

Mainstream wall-flipping tools provide Hong Kong nodes, connectivity high speed and fast, but also depends on what wall-flipping tools, Hong Kong (as in Japan) output a large number of wall-flipping traffic, features obvious, such as a large number of domestic ssr private wall-flipping servers set up in Hong Kong; and Hong Kong is a gray area, it is inevitable that the local operators are not affected by the policy, but so far do not see any obvious constraints; Hong Kong, although the geographic distance is the closest. But most of the room does not provide high-speed lines to the mainland, resulting in a lot of time routing around the long way to increase uncertainty. Once connected, the Hong Kong node speed is very fast, and can even meet the needs of the domestic wall to the foreign service to play the game, a lot of domestic chicken players preferred nodes are Hong Kong, combined, Hong Kong nodes may not be the most stable, but it is really the fastest.

And Hong Kong nodes, Japan nodes, although the distance is close, but the output of a large number of wall traffic, private wall server a lot of disconnection is also very common, before the Japanese center room is the Tokyo server room, and now slowly in other cities to open the line, the more congested at night in Beijing time, the loss of packets is serious, has been very difficult to meet the wall game and other needs of low latency and low packet loss rate of the application. Japan node once connected to the speed is very fast, can meet the online video and other high traffic applications. Overall and Hong Kong nodes are more or less the same, but from time to time there are still disconnected.

Mainstream wall-flipping tool vendors provide U.S. West Coast nodes, Los Angeles room is the most common, high connectivity, overall higher than Southeast Asia nodes. Speed is general, compared to connect to the Japanese node and the United States Los Angeles room node and then open gmail speed, the former fast latter slow. But more stable, although the same software in Japan, Hong Kong nodes (during the day) than, the United States node is not particularly advantageous, but I do not know why, the United States node at night is more stable than other places.

The Singapore node’s connectivity rate is generally lower than other places, and although it’s not that far away and not as fast as Japan’s, it can satisfy high-traffic applications such as oil pipelines. Personal experience, the Singapore node should not be the preferred node to go over the wall.

Mainstream wall-flipping tool provides Taiwan nodes generally to Hong Kong as a relay, probably because the mainland direct link to Taiwan is poor, so manufacturers do this optimization, it works. After connecting, from the point of view of the speed of opening youtube, better than other regional nodes. I used to test every day, morning and afternoon for more than 30 minutes, continuous testing for a week, very stable, better than other regional nodes, VyprVPN’s Taiwan node is very good. Unfortunately there are very few scientific internet tools available for the Taiwan node, for more reference information about using VPN in Taiwan.

South Korea nodes similar to Taiwan, the number of small, not good to find, but the connection block, but I measured the same type of wall-flipping products in Taiwan, Japan, Singapore node speed, obviously faster than the South Korean nodes, stability is good and bad, measured VyprVPN’s South Korean nodes poor, the rest did not connect, personally do not recommend South Korea nodes, although the delay is low, but good or not good to talk about.

In addition to Hong Kong and Taiwan nodes, the rest of the nodes I think are not suitable for gaming over the wall, the Japanese room Ping value has been generally in 150ms or more, also not suitable for playing games. All of the above nodes as long as the connection can watch the tube video, only individual software buffering rate of individual nodes is slightly higher, but 720p buffering are not much, video is very smooth, 1080p buffering will be a little more common. Hong Kong, Japan, the U.S. West nodes should be the first choice for wall flipping, and nodes in other regions can be used occasionally.ExpressVPN’s best nodes are Hong Kong, Japan, and Los Angeles, USA.

What can I do when I go over the wall?

If you don’t know how to flip the wall in China, chances are you’re stuck in a monotonous but confusing Chinese Internet information cocoon, cyberspace is flooded with low-quality content/services, even in non-political related professional fields, it’s hard for any professional to rely solely on Chinese online content to get their work done, from grassroots technicians in enterprises to subject leaders in research institutes, who can get away from the walled off foreign Internet services? For many contemporary Chinese, whether they recognize it or not, wall surfing has become a necessary skill, and what can they do after surfing the wall?

  • Use foreign search engine: Google/DuckDuckGo, Chinese and English search results are higher than Baidu, in any field can find quality content, even bidding ranking of advertising quality, algorithm neutrality, small and fine site can also have rankings, will not be ten results of eight ads, there is no sensitive words, not harmonized, refer to the Google search than the Baidu search good in which place?
  • Use foreign mailbox service: Gmail/ProtonMail, reliable, good reputation, outgoing mail will almost not enter the trash box or be rejected, will not somehow not receive foreign mail, neat interface, no ads push, even if there are ads are also very restrained, absolutely will not bombard your mailbox, will not be user information leakage is stolen, but also not disclosed not to deal with, but also with the calendar/online document/net disk And it can seamlessly cooperate with calendar/online document/net disk and other services, which is a good tool for efficiency. To understand the problem of domestic mailbox, refer to the answer in Which is the best choice for domestic mailbox if Gmail can’t be used? The answer in the question.
  • Mad Youtube (tube): the world’s people’s television, dozens of languages, the content is all-encompassing, you have any point of interest can be searched for high-quality channels, well-produced content is more saturated coverage, completely free, you can go to the ads, do not go, it does not matter, some of its own ads are very good, even if the ads do not look good, but also can be skipped in 5 seconds, if you buy Premium is completely free of ads, domestic! Although there is no lack of professional team, quality channels, but because of the language first, the subject matter is limited, perverted control, the proportion of poor content is high, low signal-to-noise ratio, far from Youtube rival site, if you are interested in domestic and foreign video sites, you can refer to compared to Youku, you think YouTube has what advantages?If you are interested in domestic and foreign video sites, you can refer to What advantages do you think YouTube has compared to Youku? If you are interested in YouTube, you can refer to YouTube and bilibili to see what advantages they have compared to Youku, and which one is better?
  • Subscribe to foreign music/movie services: Spotify/Netflix/Hulu/Amazon Prime Videos, over the wall to crack the lock zone, spend money to buy a membership to enjoy the latest and best quality of the genuine source, will not be VIP so that you can buy VVIP, there will be no insulting “members of the price of the exclusive” and “members of the limited time to see”, I have encouraged my family to unsubscribe to all domestic audio and video services, and will never be able to spend a penny. “I have encouraged my family members to unsubscribe from all domestic audio and video services, and I will never spend a penny on them again. It’s not that the Chinese market doesn’t have any good movies, good TV shows, or a good new song, but every year or two something decent comes out, but when it comes to the distribution of the movie, I, as a user, have to enjoy the latest and best quality movies. platform providers, I as a user to enjoy these things, I have to bear a huge insult.
  • Tracking hot spots in social media: Twitter/Facebook/Instagram, almost all the social industries of authority and non-authoritative organizations and individuals are on it, any point of interest and topics have experts online, click Follow will be able to continue to track the latest trends, will not open an account first to let you pass the ID card tied to the cell phone, post a post repeatedly edited more than a dozen times for fear of hitting the Sensitive words, but sometimes in time very careful also still hit the accidentally restricted or blocked for several days, do not have to worry about chasing people empty account or suddenly disappeared.
  • MOOC learning: Coursera/Udemy/Udacity/Edx/Skillshare …. The courses are very much produced by professional educational institutions or professional practitioners, and are very much “hard courses” in natural sciences, social sciences, engineering and technology, rather than “Jade is like smoke”, “Appreciation of Tang poetry”, “How to become a chat master” … “, “How to Become a Chatty Chatty Chatty Chatty Chatty Chatty Chatty Chatty Chat” … This kind of even the university elective courses are not worthy of entering the domestic famous universities put out low-grade goods, well in the domestic some really good quality classes have been absorbed by foreign MOOC platform, reference to organize the domestic and foreign commonly used those MOOC website; foreign MOOC platform, although itself is not necessarily by the wall, but can not help but to be walled third-party services, such as video acceleration, online customer service, do not turn over the wall will make these sites open! The oddly slow, turn over the wall to use it will be smooth.
  • P2P downloads: BT seeds/magnetic links and other P2P resources are subject to the limitations of the mainland operator’s traffic control, BT download tools can not establish a large number of peer-to-peer connections when you do not go over the wall, the download is extremely slow or even completely unable to download, this type of service is equivalent to completely unavailable, so even piracy in the country is monopolized by a small number of resource platforms (Xunlei, Baidu.com…). The most important thing is that you can’t download the pirated version of the movie. After the wall because the traffic encryption, the operator can not detect and identify, so it can not be targeted/restricted, the number of connections, connection speed, download speed will get a huge boost.
  • Playing foreign service online games: the vast majority of the game foreign service has not been walled, but many foreign service shielded mainland China IP, the real IP of the device is hidden after the wall, access to the node location IP, so you can bypass the foreign service on the mainland China IP restrictions, theoretically, you can play any foreign service, as long as you connect to the server whitelist within the country nodes can play, and may be more flexible than some of the domestic game gas pedals, foreign service compared to the national service! In addition to the delay other than the game experience are too much better, good wall software has low-latency servers and high-efficiency transmission protocols, not to lose the domestic game gas pedal, then again, if every online game has a national service, the player why bother to seek far away?

Above is only a very small list of things you can do when you go over the wall, so if you’re interested in this topic, here ‘s a continuous update.

Looking for a way to get back over the wall?

Overseas party to go back over the wall to get the mainland IP to unlock the domestic online services copyright restrictions, such as NetEase Cloud Music on behalf of the music APP, to B station and Youku on behalf of the animation / film and television / TV program APP, you can refer to how to go back over the wall to mainland China, to get the mainland IP address, access to the restricted services article, this kind of service in the stable and reliable now basically provided by domestic manufacturers, foreign manufacturers provide VPN over the wall back to China, these two years basically stopped the mainland servers, the official review of foreign businessmen to buy domestic cloud computing resources is very strict, the future is also unlikely to have foreign businessmen to provide services over the wall back to China.

As long as you have a legal identity in China, because to buy a domestic server to real name and upload the ID card, theoretically, you can buy your own domestic cloud server to set up a proxy, there is no too high technical threshold, you can even find a one-click script on the Internet, but definitely do not use the code of the open-source scientific Internet project, it’s very easy to be shielded and forced to stop the service, around the know-how of my friends told me, in fact, you just need to pass a called SSH tool to connect to the domestic server and then abroad on the phone and computer with this connection as a proxy can be, but also basically will not be detected, because SSH is extremely common network tools. Although technically set up their own domestic proxy server is not a problem at all, but the speed and stability may not reach the level of commercial services, and I’m afraid that ordinary individuals do not have the budget to bear the cost of expensive bandwidth in the country, I personally recommend that friends with such a need to buy tools to use it, the price is generally not high.

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *


2 thoughts on “A Guide to bypass the Great Firewall of China”
  1. Thanks for this great article. I have the following question. My wife and i both want to work from China (my wife is Chinese). Both of our employers use company VPNs. My wife also has a company phone. We are working in Germany. Is there any reliable way to -bypass the GFW -let the company VPNs think we are in Germany? So using a public VPN is out of question, i heard setting up a VPN on azure or similar will get you blocked by GFW, all the easy solutions seem to be not working We could maintain a physical router with internet connection in Germany if that helps. Thank you so much in advance. Also we do not need a perfect detailed solution, a hint would be nice. > Public VPNs can have private/dedicated IPs.
2
条评论
Scroll to Top