Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Need to bypass chinese firewall
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Need to bypass chinese firewall

hbjlee17hbjlee17 Member, Host Rep

Asking for a friend who is going to China and needs unrestricted internet access. Any ideas?

«1

Comments

  • Out of stock, when restock?

  • For short durations and low traffic, WireGuard works perfectly fine.
    Otherwise https://v2.hysteria.network/
    Use https://www.itdog.cn/ping/ (green button) to check ping and packet loss before you install any of those software onto your server. American and European servers usually have high packet loss when accessing them from Mainland. Hongkong and Taiwan are especially bad if not optimized.

  • @lowendtalkxdax said:

    Out of stock, when restock?

    Retsock is fast my man.

  • webhorizonwebhorizon Member, Host Rep

    @hbjlee17 said: Asking for a friend who is going to China and needs unrestricted internet access. Any ideas?

    China with its GFW is famous for very restrictive networking; As others suggested, a simple WireGuard server maybe enough but in case of not succeeding, you may look into solutions that are designed for those highly restrictive networks such as sing-box (check protocols such as VLESS-Reality or Hysteria)

  • yoursunnyyoursunny Member, IPv6 Advocate

    There are many ways to bypass the firewall.
    In the past, we used mallory, an HTTP proxy over SSH tunnel.
    The proxy is running on a Raspberry Pi 3 within the home network, while each of my smartphone is set to use this proxy.

    However, anyone attempting to bypass the firewall will be asked to have tea at the police station.
    Unlike the American "coffee with a cop" events where the community can engage with a friendly officer, the Chinese tea would come with a stern warning of not attempting to bypass the firewall again.
    Repeated offenders are to be detained and beaten.

  • davidedavide Member

    @yoursunny said:
    Repeated offenders are to be detained and beaten.

    You seem to love your mother country :)
    How was your tea?

    Thanked by 110thHouse
  • Try Hysteria2 on AWS Lightsail JP/SGP.

    Should be relatively good enough.

  • Recommend VLESS+REALITY+XTLS-RPRX-VISION combination,Sing-Box or Xray core should be fine.

  • qquccsqquccs Member

    Be careful not to get caught

  • edited July 2024

    If nothing changed over the years i think you should be able to get out simply having a foreign SIM card while roaming inside a Chinese network. If you can find a local mobile plan providing sufficiently cheap China roaming is obviously another question but if it works it would be quite easy and risk free.

    If things didn't change you might also get away with simply using a Hong Kong SIM (someone correct me if i'm wrong but i remember those actually had largely unfiltered internet access a couple years back). I'd still run a VPN on top of this though as the traffic obviously goes through the Chinese networks before being passed on to your foreign provider.

  • Try SwizzVPN, have some customers from China, works fine for them

  • ralfralf Member

    @totally_not_banned said:
    If things didn't change you might also get away with simply using a Hong Kong SIM (someone correct me if i'm wrong but i remember those actually had largely unfiltered internet access a couple years back). I'd still run a VPN on top of this though as the traffic obviously goes through the Chinese networks before being passed on to your foreign provider.

    Yep, I was last there in Feburary, my HK 3 SIM was routed via Hong Kong the whole time I was in China. No problems accessing any of the typically problematic sites. In fact my only issue was some of my wechat pay attempts failed because 3 blocked the chinese site for phishing (the standard wechat pay was fine, but some vendors use proprietary forms to collect more data). You need to be physically in HK to buy the SIM card and show your passport / ID card, so if you're from the mainland there might be additional restrictions

    Also had success with a cmlink UK SIM card, except that all my traffic was routed via London and it was quite slow to access anything outside Europe. You don't need any proof of ID to buy these, but you do need a UK address to receive it by post. You can top up using wechat though.

    Thanked by 1totally_not_banned
  • edited July 2024

    @ralf said:

    @totally_not_banned said:
    If things didn't change you might also get away with simply using a Hong Kong SIM (someone correct me if i'm wrong but i remember those actually had largely unfiltered internet access a couple years back). I'd still run a VPN on top of this though as the traffic obviously goes through the Chinese networks before being passed on to your foreign provider.

    Yep, I was last there in Feburary, my HK 3 SIM was routed via Hong Kong the whole time I was in China. No problems accessing any of the typically problematic sites. In fact my only issue was some of my wechat pay attempts failed because 3 blocked the chinese site for phishing (the standard wechat pay was fine, but some vendors use proprietary forms to collect more data). You need to be physically in HK to buy the SIM card and show your passport / ID card, so if you're from the mainland there might be additional restrictions

    Also had success with a cmlink UK SIM card, except that all my traffic was routed via London and it was quite slow to access anything outside Europe. You don't need any proof of ID to buy these, but you do need a UK address to receive it by post. You can top up using wechat though.

    It kinda seems like any foreign mobile provider would do that. I've never been to China but i've used a lot of roaming over the years and the IPs i got always belonged to the provider issuing the SIM card, no matter where i was actually roaming. If there's suitable (as in enough Chinese roaming data) UK prepaid/top up SIMs (i don't know enough about the UK's mobile market to guess if cmlink would fall into that category) are usually also easily available on Ebay as there's no registration requirement. The top up process might be a little tricky though forcing one to rely on third party websites, which take Paypal/CC if vouchers aren't available but i think at least sometimes local codes actually work if it's one of the big multinational brands.

    Given the data handling seems to be universal getting a local SIM with cheap China roaming would probably be OP's best option anyways to avoid crazy routing like China => UK => South Africa or whatever.

  • edited July 2024

    With https://seeek.co you get a free eSIM with 3GB/month (also free) btw. Works in Mainland as well. Only caveat is you have to wait forever for the waitlist. Can skip it for 5€ though.

    Thanked by 1t0m
  • Use tailscale/zerotier.

  • Roaming with your SIM card is the best solution and its legit. Unless you want to use local wifi to save your traffic.

    Thanked by 1yoursunny
  • ralfralf Member

    @totally_not_banned said:
    Given the data handling seems to be universal getting a local SIM with cheap China roaming would probably be OP's best option anyways to avoid crazy routing like China => UK => South Africa or whatever.

    Sure, but if you use a local SIM, you'll hit the GFW. Using one of the HK SIMs is the best option to avoid GFW in terms of connectivity to China and cheap tariffs. I paid about USD 30 for 45GB of data that was usable across HK, Macao and Mainland China, with 12 months to use up the data.

  • ehhthingehhthing Member
    edited July 2024

    @ralf said:

    @totally_not_banned said:
    If things didn't change you might also get away with simply using a Hong Kong SIM (someone correct me if i'm wrong but i remember those actually had largely unfiltered internet access a couple years back). I'd still run a VPN on top of this though as the traffic obviously goes through the Chinese networks before being passed on to your foreign provider.

    Yep, I was last there in Feburary, my HK 3 SIM was routed via Hong Kong the whole time I was in China. No problems accessing any of the typically problematic sites. In fact my only issue was some of my wechat pay attempts failed because 3 blocked the chinese site for phishing (the standard wechat pay was fine, but some vendors use proprietary forms to collect more data). You need to be physically in HK to buy the SIM card and show your passport / ID card, so if you're from the mainland there might be additional restrictions

    You don't need to be physically in HK if you get eSIM instead of physical SIM, and you also don't need show ID if you only use the service outside of Hong Kong. You cannot order from a Chinese IP address.

    If you were wondering the way that the CCP prevents locals from abusing this is by forcing all phone manufacturers to not have eSIM in the Chinese market.

    Would recommend CUHK instead though because its cheaper and the routing is much better for accessing mainland chinese services (uses Unicom Global which is highly optimized China route).

    What 3HK does have (and is really cool) is the option to add a "mainland china number" to your account which allows you to get SMS codes for some mainland services which might not like non +86 phone numbers.

    Oh also, this audience probably doesn't care but you should know that TikTok is not available in Hong Kong because they pulled out after the national security law was enacted.

    Thanked by 1ralf
  • edited July 2024

    @ralf said:

    @totally_not_banned said:
    Given the data handling seems to be universal getting a local SIM with cheap China roaming would probably be OP's best option anyways to avoid crazy routing like China => UK => South Africa or whatever.

    Sure, but if you use a local SIM, you'll hit the GFW. Using one of the HK SIMs is the best option to avoid GFW in terms of connectivity to China and cheap tariffs. I paid about USD 30 for 45GB of data that was usable across HK, Macao and Mainland China, with 12 months to use up the data.

    I ment local as in from wherever OP lives. Basically any non-China SIM with one from OP's usual location probably offering better routing for him than one from some random place due to going through a network near most of his target services. HK providers might still have the better roaming contracts and given that traffic would probably pass HK anyways it's unlikely to add a lot of latency in general.

  • You can't use wireguard or openvpn in China and need to use something like v2ray or a similar software. You can use tor in China if you use the proper configuration.

  • It is not recommended to use public VPN software as it is easy to leak privacy. Instead, spend a few dollars to buy a VPS (preferably with a China-optimized line) and build your own Hysteria2 service. It will be perfect!

  • @BruhGamer12 OpenVPN with XOR patch and TLS crypt v2 over TCP port 443 works fine in China (since over a year with my service)

  • @hbjlee17 said:
    Asking for a friend who is going to China and needs unrestricted internet access. Any ideas?

    I can provide Cisco security services to users going to China. The charges are reasonable. You can contact me if you need it.

  • @SwizzVPN said:
    @BruhGamer12 OpenVPN with XOR patch and TLS crypt v2 over TCP port 443 works fine in China (since over a year with my service)

    oh interesting - I did not know. Thanks for the info.

  • alt_alt_ Member
    edited July 2024

    My web proxy can be temporary solution for you: https://rt.http3.lol (comes with CN2 connection). Or I suggest Tailscale, as it is based on Wireguard VPN and even more flexible with mesh network.

  • HuxleyHuxley Member, Host Rep
    edited July 2024

    @yoursunny said:
    Repeated offenders are to be detained and beaten.

    I was living in China. i use various ...for many years for work. Never got any warning. detained and beaten? only if you are a criminal, you got detained. But never heard of beaten things. If there is beaten thing, it happened 40 years ago

  • @lowendtalkxdax said:
    For short durations and low traffic, WireGuard works perfectly fine.
    Otherwise https://v2.hysteria.network/
    Use https://www.itdog.cn/ping/ (green button) to check ping and packet loss before you install any of those software onto your server. American and European servers usually have high packet loss when accessing them from Mainland. Hongkong and Taiwan are especially bad if not optimized.

    hys2 cn已经用不了 最近在审查

  • @shangkouyou said:
    hys2 cn已经用不了 最近在审查

    那还有哪些方路能靠谱的进出?

This discussion has been closed.