• zephyreks@lemmy.mlM
      link
      fedilink
      arrow-up
      8
      ·
      edit-2
      11 months ago

      Yep, precisely this. It’s extremely hard to block arbitrary internet traffic and everyone who thinks China lives in a propagandized bubble with no exit is deluding themselves.

      FWIW, VPN enforcement is much more strict in Xinjiang and Tibet so I think Chinese authorities have the capability, they just choose to not exert it most of the time (to avoid an ever-escalating arms race lol).

    • Darkassassin07@lemmy.ca
      link
      fedilink
      English
      arrow-up
      6
      ·
      edit-2
      11 months ago

      Got any suggestions for software?

      I run openvpn normally and I’ve tried shadowsocks but neither have gotten through the vpn blocks I’ve tested against.

      • Gellis12@lemmy.ca
        link
        fedilink
        English
        arrow-up
        6
        ·
        11 months ago

        Tor. It’s free, it works, and there’s nobody to sell you out when the cops come knocking.

        • Darkassassin07@lemmy.ca
          link
          fedilink
          English
          arrow-up
          4
          ·
          11 months ago

          I’m looking for something self-hosted for secure access to my LAN, not just to reach open internet unfortunately.

          • Gellis12@lemmy.ca
            link
            fedilink
            English
            arrow-up
            1
            ·
            11 months ago

            If you’re just looking for remote access, openvpn on port 443 should (in theory) be indistinguishable from normal https traffic.

          • Gellis12@lemmy.ca
            link
            fedilink
            English
            arrow-up
            1
            ·
            11 months ago

            If they did, I haven’t heard about it. China has been trying and failing to block tor for decades though, so I kinda doubt Russia managed to beat them to it overnight.

      • Varyk@sh.itjust.works
        link
        fedilink
        arrow-up
        5
        ·
        11 months ago

        Both astrill and protonvpn sashayed straight past the great firewall when I visited. There was some free Chinese vpn, greenvpn I think, that worked too, but was slow.

    • residentmarchant@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      1
      ·
      11 months ago

      What’s the reasoning for this? Surely it’s not that difficult to block all traffic pointing to “vpn.protonvpn.com” (simplified url for the sake of argument)

      Even if a VPN provider had 100 URLs to tunnel traffic through, they would all be found in a matter of time, no?

      • apt_install_coffee@lemmy.ml
        link
        fedilink
        arrow-up
        14
        arrow-down
        1
        ·
        edit-2
        11 months ago

        The difficulty is that a VPN isn’t just a product like ProtonVPN, it’s a huge family of software and protocols.

        You can block vpn.protonvpn.com, but since most operating systems come with VPN functionality out of the box, you’d have to start listening to all traffic (not just DNS lookups) and blocking ALL packets that might be VPN traffic without causing regular disruption to non-vpn traffic.

        TL;DR: it’s easy to prevent unmotivated users from downloading a VPN app. It’s practically impossible to block a motivated user from using a VPN, and they’re the users you particularly care about.

      • Varyk@sh.itjust.works
        link
        fedilink
        arrow-up
        1
        arrow-down
        14
        ·
        11 months ago

        I’m just a user, but afaik if the server you’re routing through is outside of China, they have no right to block the traffic.

        I think it’s some international agreement that no country is allowed to block external traffic because that interferes in other countries’ affairs something something, but I don’t know the specifics.