-
Notifications
You must be signed in to change notification settings - Fork 2
/
country-by-country.html
53 lines (40 loc) · 5.41 KB
/
country-by-country.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Country by Country</title>
<link rel="stylesheet" href="css/style.css">
<meta property="og:title" content="Country by Country">
<meta property="og:description" content="Counter-censorship measures grouped by country">
<meta property="og:type" content="website">
<meta property="og:image" content="https://computerscot.github.io/img/computerscot.png">
<meta property="og:url" content="https://computerscot.github.io/country-by-country.html">
</head>
<body>
<div id="bar">
<div class="wrapper">
<p><a href="https://computerscot.github.io">computerscot.github.io</a></p>
</div>
</div>
<div class="wrapper">
<h1>Country by Country</h1>
<p><em>August 18, 2023</em></p>
<h2>China</h2>
<p>China's GFW is the granddaddy of all firewalls. It is evolving rapidly, so the information you read here may be out of date by the time you read it. The current preferred method is Xray REALITY, especially with gRPC or HTTP/2 transports. Pay particular attention to making sure your domestic traffic does not go out to a foreign server then immediately return to the country, as that marks your server as a sure proxy server. Restrictions are particularly tight during "sensitive" periods. Outside of sensitive periods, the GFW switches from blocking mode to surveillance mode. A summary of counter-censorship methods is <a href="https://cscot.pages.dev/2023/06/01/summary-of-methods">here</a>.</p>
<h2>Egypt</h2>
<p>Egypt started blocking VPN protocols in 2017. OpenVPN was the last one blocked. A <a href="https://lime-sec.netlify.app/posts/openvpn-dpi-obsfucation">blog post</a> from 2022 says you can be successful in evading DPI if you pass OpenVPN through Shadowsocks. The key step is to include a statement such as <code>socks-proxy 127.0.0.1 1080</code> in the OpenVPN client configuration, where <code>1080</code> is the local port for the Shadowsocks client. This is only possibly on desktop computers, not on mobile. You also need to route your server address directly to prevent a routing loop. I've consolidated notes from various sources into a post <a href="openvpn-over-shadowsocks.html">openvpn-over-shadowsocks.html</a> that outlines the process for Windows, Linux, and macOS.</p>
<h2>Iran</h2>
<p>The GFW Iran appears to have started with technology similar to the GFW China, but rapidly became even stricter. Some notes on counter-censorship techniques for Iran are <a href="https://cscot.pages.dev/2023/07/03/iran">here</a>. The latest news at the time of writing is that high traffic causes an IP address to be throttled and eventually blocked.</p>
<h2>Russia</h2>
<p>Roskomnadzor (Роскомнадзор) has imposed more and more restrictions over the last few years. Blocks are often imposed ISP by ISP by installing a TSPU (ТСПУ, технические средства противодействия угрозам) within the ISP itself. Sites that advise on how to bypass censorship may themselves be blocked. VPN protocols may still work with minor changes, e.g. by sending a spoof packet to the WireGuard port to impede identification of the protocol. Other suggestions include having a relay server in a domestic data center with no TSPU; initiating the connection from outside Russia coming in; or passing OpenVPN over a SOCKS proxy. For the latest counter-measures, consult <a href="https://ntc.party/c/internet-censorship-all-around-the-world/russia/12">ntc.party</a>.</p>
<h2>Türkiye / Turkey</h2>
<p>Journalists are in jail. Social media are blocked. Major VPNs are blocked. Alternatives that may work include Proton, Mullvad, and Kaspersky. <a href="https://github.com/ValdikSS/GoodbyeDPI">GoodbyeDPI</a> may also work.</p>
<h2>Turkmenistan</h2>
<p>Turkmenistan (ISO 3166 code <code>TM</code>) is a landlocked country in Central Asia with an official population of 7 million. So many people have fled the country that the real population may be half the official figure. It is one of the worst countries in the world for Internet censorship, forcing Muslims to swear on the Quran that they will not use a VPN. A few people have been able to get through the firewall using Tor with bridges. Psiphon has also been known to work in Turkmenistan. GreatFire's FreeBrowser has also been reported to work. There are occasionally posts about Turmenistan on <a href="https://ntc.party/c/internet-censorship-all-around-the-world/turkmenistan/17">ntc.party</a>.</p>
<h2>Other countries</h2>
<p>If your country is not listed here, it means I have no information about it. You should of course start by determining the legality of VPNs in your country. That's something I can't advise you about. If VPNs are legal, you might be able to use one of the ordinary mass-market VPN providers, the kind that clog up search engine results with their affiliate links. Then you might try Tor with bridges, as bridges are specifically designed for evading censors. And if none of those work, you can look into the <a href="https://cscot.pages.dev/2023/06/01/summary-of-methods">Chinese methods</a> to see if they work in your country.</p>
</div>
<!-- Cloudflare Web Analytics --><script defer src='https://static.cloudflareinsights.com/beacon.min.js' data-cf-beacon='{"token": "94e45ea74d58413395c468ebe6bab324"}'></script><!-- End Cloudflare Web Analytics -->
</body>
</html>