So companies are not using vpns?
Comment on UK households could face VPN 'ban' after use skyrockets following Online Safety Bill
imouto@lemmy.world 5 days agoMost conventional VPNs, e.g. OpenVPN, WireGuard, AnyConnect, PPTP/L2TP, IKEv2/IPsec, etc., actually don’t work in China. Technology-wise GFW is quite sophisticated and conventional VPNs are not designed for censorship circumvention anyway.
You’ll have to use things like Shadowsocks or V2Ray, which is out of the reach of most people.
1984@lemmy.today 5 days ago
NateNate60@lemmy.world 5 days ago
The Great Firewall doesn’t block by protocol. If you set up your own OpenVPN server, you can still connect to it. I’ve done this many times in my trips to China, and it’s worked fine. That being said, they still do seem to throttle connections to international servers, though this happens to all servers, even those that are not blocked. There are many clandestine VPN operators in China who spin up their own VPN servers and sell the service. They are mostly OpenVPN-based.
My university used Cisco AnyConnect, and I was able to successfully connect to the university VPN servers as well.
The limited experimentation I have conducted seems to indicate that the Great Firewall blocks by IP and not by protocol.
imouto@lemmy.world 5 days ago
And how do they update that IP list? Manually? If you set up your own overseas server, it’s gonna be ok for a few days for sure. But they update the block list automatically so people had to e.g. use CloudFlare websocket as a jump host to avoid switching providers every other month. Of cos CF is mostly blocked these days too so it’s probably just easier to offload the work to those VPN operators you mentioned.
Universities are a different matter. They use Edu network and there used to be no censorship at all in Edu IPv6. Nowadays it’s still relatively easy for them to get exemptions for their labs and whatnot.
NateNate60@lemmy.world 5 days ago
I don’t know how they update their IP list. My university is an American university which I believe has no ties to China, but I can’t say for sure. According to friends who use the clandestine OpenVPN services, they pay about 20 CNY a month and every month they are issued a new OVPN configuration file. Only occasionally do their servers get blocked before this, and then they have to issue new config files to everyone.
As for myself, I have been to China two times using the OpenVPN server that I deployed on a US-based VPS I rented from a German hosting provider. Each trip lasted about one month. So far, the IP has not been blocked. The government’s philosophy regarding the firewall and VPNs seems to be “make it as annoying as possible for the average uninformed layperson to bypass and go after people selling illegal VPNs, but otherwise, we don’t give a shit”.
Both times I was there, the firewall didn’t apply to cellular data because they do not apply the firewall to holders of foreign SIM cards using their cellular service. I purchased a SIM from a Hong Kong carrier (SoSim) with a few gigabytes of data in both Hong Kong and mainland China for 100 HKD. It worked fine, though I do note that surveillance laws meant that I had to upload my passport to activate the service. I’m not a big fan of that, so I kept the VPN connected at all times, though normally-blocked websites did indeed work on cellular data even without the VPN. I checked on my cell phone’s settings, and I know it connects to China Mobile towers when in mainland China. Note that China Mobile is owned by the Chinese state.