4 ms·

> I don't think so. Chinese firewall can block VPN. For example, the easiest way to see if the user is using a VPN is to count a number of IP addresses they con

> I don't think so. Chinese firewall can block VPN. For example, the easiest way to see if the user is using a VPN is to count a number of IP addresses they connect to. China is a special case as unlike most other countries, all major ISPs are state owned. When you own every internet connection in the country, it's much easier to spot VPNs. When you're say Comcast, you only see the connections your customers make and accept, you can't see what VPN servers are doing. > How exactly? In countries other than China, where government control is less prevalent and the government is overtly democratic, false positives will result in anger in the populace, which will lead to the person implementing the policy losing power or at the very least, a degree of support.

PhasmaFelis 9y ago
> China is a special case as unlike most other countries, all major ISPs are state owned. When you own every internet connection in the country, it's much easier to spot VPNs. It doesn't matter who owns the ISPs if the government has the power and will to force all of them to comply.
- CommanderData 9y ago
  Worth mentioning the UK has blocked access to all major torrent websites and it is very effective on all ISPs. It was implemented in a matter of months and has improved over time from a simple DNS redirect to now blocking IP ranges and DPI. Internet Censorship and ISP wide blocking to us westerners is a new thing and I think people here are speaking during a time where we have it pretty good. There is no ISP proactive battle against VPNs. Yes, you may be able to get through your companies firewall but is that the same? VPN use in China is difficult and becoming more so. UK ISPs are now logging DNS requests from order of the government. In the beginning the ISPs complained and said it was technologically difficult. I wouldn't be surprised if that was just a call to access some gov funds and hey presto both parties win.
  - codedokode 9y ago
    > There is no ISP proactive battle against VPNs. That is until some government official learns about them.
codedokode 9y ago
> all major ISPs are state owned That is not important. In Russia even private ISP are required to install a firewall to block access to sites that are spreading illegal information (and they are also required to install a device that is monitoring whether the blocking policies are followed). There is also a law that will oblige ISPs record and keep customers' traffic in the future. > When you're say Comcast, you only see the connections your customers make and accept, you can't see what VPN servers are doing. A user of VPN typically has a single outgoing connection to a data center IP and that is easy to detect for an ISP. There is no need to see the VPN server's connections if you see the user's ones. > where government control is less prevalent and the government is overtly democratic, false positives will result in anger in the populace In those countries there will be no censorship and no need for a VPN. Also, most people don't use tools like VPNs and use Internet mostly for sites like social networks. Even if there are 1% of annoyed customers that cannot use VPN or SSH, the rest 99% won't notice that.

PhasmaFelis 9y ago

> China is a special case as unlike most other countries, all major ISPs are state owned. When you own every internet connection in the country, it's much easier to spot VPNs. It doesn't matter who owns the ISPs if the government has the power and will to force all of them to comply.

CommanderData 9y ago
Worth mentioning the UK has blocked access to all major torrent websites and it is very effective on all ISPs. It was implemented in a matter of months and has improved over time from a simple DNS redirect to now blocking IP ranges and DPI. Internet Censorship and ISP wide blocking to us westerners is a new thing and I think people here are speaking during a time where we have it pretty good. There is no ISP proactive battle against VPNs. Yes, you may be able to get through your companies firewall but is that the same? VPN use in China is difficult and becoming more so. UK ISPs are now logging DNS requests from order of the government. In the beginning the ISPs complained and said it was technologically difficult. I wouldn't be surprised if that was just a call to access some gov funds and hey presto both parties win.
- codedokode 9y ago
  > There is no ISP proactive battle against VPNs. That is until some government official learns about them.

codedokode 9y ago

> all major ISPs are state owned That is not important. In Russia even private ISP are required to install a firewall to block access to sites that are spreading illegal information (and they are also required to install a device that is monitoring whether the blocking policies are followed). There is also a law that will oblige ISPs record and keep customers' traffic in the future. > When you're say Comcast, you only see the connections your customers make and accept, you can't see what VPN servers are doing. A user of VPN typically has a single outgoing connection to a data center IP and that is easy to detect for an ISP. There is no need to see the VPN server's connections if you see the user's ones. > where government control is less prevalent and the government is overtly democratic, false positives will result in anger in the populace In those countries there will be no censorship and no need for a VPN. Also, most people don't use tools like VPNs and use Internet mostly for sites like social networks. Even if there are 1% of annoyed customers that cannot use VPN or SSH, the rest 99% won't notice that.