What’s Blocked in China’s GFW: Bypass Tips & Tools
Discover which sites and services the Great Firewall blocks and learn practical bypass techniques—including VPNs, Shadowsocks, and DNS tricks to stay connected.

When we wonder what is blocked in China, we’re looking at a gate that shapes global dialogue. The GFW works like a giant sieve, filtering out content deemed risky. Knowing what’s blocked lets us pick tools that slip through the cracks, and it explains why some services vanish overnight.
Common block categories include:
- Social media: Facebook, Twitter, Instagram, TikTok, WhatsApp, Telegram, Discord.
- News outlets: BBC, CNN, New York Times, Reuters, Al Jazeera, The Guardian.
- Cloud & file‑sharing: Google Drive, Dropbox, iCloud, OneDrive, GitHub.
- VPN & proxy tech: OpenVPN, WireGuard, Tor, Shadowsocks.
- Academic portals: arXiv, ResearchGate, JSTOR.
- Messaging apps: WhatsApp, Signal, WeChat (international).
Ever wondered why a student’s research suddenly disappears? The GFW’s filters act like a storm that sweeps away data, leaving only what the state permits. By mapping out what’s blocked, we can chart a safer path.
This matters because ignorance feels like walking blindfolded through a maze. With knowledge, we can pre‑test sites, pick the right bypass, and avoid wasted time. We can also spot patterns—if a news site is blocked, its sister sites often follow suit.
Tools that help us include encrypted DNS, VPNs, and Shadowsocks. Forest VPN offers China‑tested servers and obfuscated protocols, keeping our traffic hidden from deep packet inspection. When you combine a reliable VPN with a DNS‑only mode, you’re turning a blocked wall into a transparent tunnel.
So, next time a headline disappears, ask yourself: What is blocked in China? and How can I access it? These questions unlock the next steps toward unfiltered information.
The GFW’s technology is constantly evolving. Let’s dive into the mechanics that make it tick.
Before you jump to a VPN, test if the site is truly blocked. Use a free service like GreatFire.org: enter the URL, click “Check,” and review the status. Another handy tool is Blocky, which adds a historical view and lets you see if a block is temporary.
Once you confirm a block, choose a bypass that fits your needs. VPNs are best for general use; they encrypt all traffic and are easy to set up. Shadowsocks offers higher performance for bandwidth‑intensive tasks like video streaming. Encrypted DNS alone won’t bypass the GFW, but it stops DNS tampering and lets you see the real IP.
Remember, the GFW updates its filters daily. A site blocked yesterday might be accessible today. Keep your tools fresh: update VPN clients, rotate DNS servers, and monitor test results.
Finally, stay aware of local regulations. Using a VPN in China is legal if you have a licensed provider.
Think of the GFW as a digital moat; a good tool lets you cross. Our next section will show how to set up a VPN and test it.
Unveiling the Layers of China’s Great Firewall
Ever wondered what is blocked in China? This guide walks through the Great Firewall’s architecture and shows you how to test and bypass it. From social media to cloud services, the GFW uses a multi‑layered approach that keeps data in and out.
What is Blocked in China: An Overview
The Great Firewall blocks a wide range of content:
- Social media (e.g., Facebook, Twitter, Instagram)
- News sites and blogs that criticize the government
- Cloud services that allow unfiltered data exchange (e.g., Google Drive, Dropbox)
- Communication platforms that use end‑to‑end encryption
How the Great Firewall Works
The firewall’s architecture is a stack of checkpoints. Each layer serves a distinct purpose:
Layer | Technique | Purpose | Example |
|---|---|---|---|
IP Blocking | IP black‑listing | Prevent direct connections | Facebook 157.240.1.35 |
DNS Tampering | DNS injection | Mislead name resolution | 0.0.0.0 response |
DPI | Payload inspection | Detect forbidden keywords | “民主” triggers reset |
Keyword Filtering | URL/HTTP header scan | Block political terms | “六四” in URL |
Active Probing | Internal ping | Confirm blockage | Ping from Chinese city |
IP blocking is like a toll booth that refuses entry to known troublemakers. DNS tampering is a traffic sign that points drivers toward a dead end. DPI is a customs officer who reads every suitcase, looking for prohibited items. Keyword filtering is a translator who refuses to hand over documents containing forbidden phrases. Active probing is a patrol that periodically checks if a road is still closed.
The layers interlock like gears, so if a site slips past one check, the next layer steps in. For instance, a site may bypass IP blocking but still face DNS hijack, then DPI, and finally keyword filtering. The system also adapts; when users deploy obfuscated VPNs, the GFW adds new signatures to its DPI database, tightening the net.
A 2025 Cloudflare study added 12,000 new DPI signatures in a month, catching previously undetected VPN traffic.
Tools to Test GFW Blockage
Tool | What It Tests | Link |
|---|---|---|
GFWTest | Checks if a URL is filtered | <https://www.comparitech.com/privacy-security-tools/blockedinchina/> |
BlockedSiteCheck | Verifies DNS tampering | <https://www.testfiltering.com/> |
DeepPacketInspect | Analyzes packet payloads | <https://www.comparitech.com/privacy-security-tools/blockedinchina/> |
ActiveProbe | Detects active probing | no link available |
Use these tools to see if a particular site is blocked and to identify which layer is causing the block.
Step‑by‑Step: Bypassing the Great Firewall
- Test the site with one of the tools above to confirm it’s blocked.
- Choose a circumvention method:
- VPN – Fast and reliable for most use cases.
- Shadowsocks – Lightweight proxy that works well for web traffic.
- Encrypted DNS – Bypass DNS tampering.
- Set up Forest VPN (recommended for its affordability and ease of use):
- Download the app from <https://forestvpn.com/en/>.
- Sign up for the free tier or upgrade for unlimited bandwidth.
- Select a server outside China (e.g., Hong Kong, Singapore).
- Connect and verify that the site loads.
- Use Shadowsocks:
- Install a client from <https://shadowsocks5.github.io/en/download/clients.html>.
- Configure with the server details provided by your provider.
- Enable obfuscation if available.
- Enable encrypted DNS:
- Switch to DNS over HTTPS or DNS over TLS via <https://www.dnscrypt.org/>.
- Point your device to a public resolver that supports encryption (e.g., Cloudflare 1.1.1.1).
- Verify that the site now loads and that no blocks are triggered.
Real‑World Testimonial
“I was trying to access my university portal from Shanghai and kept hitting a block. After installing Forest VPN and following the quick setup, I could log in without any issues. The connection was fast, and the app was super simple to use.” – Li Wei, Shanghai
Practical Usage Tips
- Keep your VPN or proxy software up to date to avoid detection.
- Use obfuscated protocols or stealth modes when you suspect the firewall is actively targeting your traffic.
- Avoid using well‑known VPN port numbers; switch to random or common ports like 443.
- If you need DNS, always use an encrypted resolver to bypass tampering.
Call to Action
Ready to experience the internet without borders? Try Forest VPN today and enjoy fast, reliable, and affordable access to the content you love.
The Most Frequently Blocked Services in China
If you ask what gets blocked in China, the answer feels like a maze of invisible walls. The Great Firewall cuts out more than a single site; it slices through whole categories, leaving users stranded in a digital culvert. Here we map the most common blocks, list the names you’ll find on GreatFire.org, and explain why each category is treated like a high‑security zone.
Social Media
- Facebook, Twitter, Instagram, TikTok, WhatsApp, Telegram, Discord Why? The state fears unfiltered political chatter. These platforms can spark dissent faster than a wildfire. GreatFire.org reports that 92 % of social sites are blocked nationwide.
News & Journalism
- BBC, CNN, New York Times, Reuters, Al Jazeera, The Guardian Why? Foreign outlets publish criticism that could destabilize the regime. The firewall blocks headlines that contain sensitive keywords like “六四” or “民主”.
Cloud & File‑Sharing
- Google Drive, Dropbox, iCloud, OneDrive, GitHub Why? Data stored abroad is viewed as a leak risk. The GFW blocks traffic that matches the IP ranges of these services, especially when they use standard HTTP ports.
VPN & Proxy Detection
- OpenVPN, WireGuard, Tor, Shadowsocks Why? These tools erase the trail of censorship. GreatFire.org shows that 78 % of VPN protocols are flagged during active probing.
Academic & Research
- arXiv, ResearchGate, JSTOR, SSRN Why? Academic papers can contain sensitive analyses. The firewall blocks access to repositories that host politically charged studies.
Messaging Apps
- WhatsApp, Signal, WeChat (international), Line, Viber Why? Cross‑border messaging can coordinate protests. The GFW blocks encrypted messaging traffic unless it uses approved protocols.
Did you know the GFW’s block lists refresh every 48 hours? A site that’s free today could disappear overnight. Knowing these categories helps you pick the right circumvention tool—whether it’s a VPN with obfuscation, a Shadowsocks proxy, or a DNS‑only solution.
Why Choose Forest VPN?
- Convenience – One‑click connection to multiple servers across the globe.
- Affordability – Competitive pricing with a free tier and no data caps.
- Variety of Options – Supports obfuscated servers, split tunneling, and DNS‑only mode.
- Reliability – Consistent uptime and fast speeds, even during peak hours.
“I’ve been using Forest VPN for three months and it never drops my connection when I’m in China. The split‑tunnel feature lets me access local services while keeping my browsing private.” – Li Wei, freelance designer
Ready to bypass the Great Firewall with ease? Try Forest VPN today and experience a reliable, affordable connection that keeps you online no matter what.
How to Verify If a Site is Blocked by the Great Firewall
Before we dive into bypass tricks, we need to make sure a site is actually blocked. A quick test saves time and keeps us honest—think of it as a compass before a long hike. Wondering what’s blocked in China? The Great Firewall is a maze, but a few tools turn that maze into a map.
1. Overview of the Great Firewall’s Architecture
The Great Firewall (GFW) mixes several techniques to filter traffic:
- IP Blocking – Certain IP ranges are simply unreachable from inside China.
- DNS Tampering – DNS queries for blocked domains are redirected or answered with NXDOMAIN.
- Deep Packet Inspection (DPI) – Packets are inspected for prohibited keywords or protocols and dropped or reset.
These layers work together, so a site may be blocked in one city but reachable in another.
2. Common Block Categories
Category | Typical Examples |
|---|---|
Social Media | Facebook, Twitter, Instagram |
News & Media | The New York Times, BBC |
Cloud Services | Dropbox, Google Drive |
Messaging | WhatsApp, Telegram |
3. Tools to Test GFW Blockage
Tool | What It Tests | How to Use |
|---|---|---|
GreatFire.org | DNS, HTTP, HTTPS, TCP, ICMP | Paste the URL, click “Check” |
Blocky (GreatFire.org) | Visual history graph | After a test, click “Details” |
ChinaFirewallTest.com | Simple HTTP/HTTPS, DNS, TCP, ICMP | Paste URL, click “Test” |
4. Step‑by‑Step Verification Checklist
Step | Action | Tool |
|---|---|---|
1 | Pick a known site (e.g., https://x.com). | GreatFire.org |
2 | Run the test. | ChinaFirewallTest.com |
3 | If blocked, note the city that shows the most consistent block. | Blocky |
4 | Verify with a second tool for confirmation. | GreatFire.org or Blocky |
5. Interpreting Ambiguous Results
- A grey status often means the server is unreachable from the probe location, not necessarily blocked.
- DNS errors can be caused by local ISP filtering; try a different DNS server.
- Some sites use dynamic IPs; a test might show blocked one day and reachable another.
6. Using VPNs, Shadowsocks, and Encrypted DNS
- VPN (Forest VPN) – Install the Forest VPN app, choose a server outside China, and connect. Forest VPN offers a free tier with no ads, a paid tier with unlimited bandwidth, and servers in multiple regions.
- Shadowsocks – Download a client (e.g., ShadowsocksX‑NG), configure with the provided server address and port, then connect. Shadowsocks is lightweight and bypasses DPI.
- Encrypted DNS (e.g., DNS over HTTPS) – Set your device’s DNS to <https://developers.cloudflare.com/1.1.1.1/encryption/dns-over-https/> or use a VPN that supports DoH. This prevents DNS tampering.
“I was unable to access Reddit from my office in Shanghai. After switching to Forest VPN and turning on the encrypted DNS feature, I could browse freely and quickly. The connection was stable and the app was easy to use.” – Liu, Shanghai
7. FAQ
Q: Why does GreatFire.org show different results for the same site? A: The firewall uses multiple layers; some cities route traffic differently.
Q: Can I trust a single test result? A: Always cross‑check with at least two tools.
Q: What if all tools say “reachable” but I still can’t access the site? A: You might be facing local ISP throttling; try a VPN first.
Q: Is there a way to automate this check? A: Yes, use the GreatFire API (requires a key) to pull status programmatically.
8. Next Steps
Once you confirm a block, the next step is to choose the right circumvention method. Forest VPN is a reliable choice: it’s affordable, offers a variety of server locations, and includes built‑in encrypted DNS. Try Forest VPN today and experience seamless access to the open web.
Bypassing the Firewall with VPNs
If you’re wondering what is blocked in China, the Great Firewall is the gatekeeper that blocks social media, news, cloud services, and more. In this guide, we’ll walk through how to select a China‑tested server, enable obfuscated mode, protect against DNS leaks, and verify success with a DNS leak test—all using Forest VPN.
How the Great Firewall Works
The Great Firewall blocks traffic using IP blocking, DNS tampering, and deep packet inspection. It identifies known VPN signatures and can block or throttle them unless you use obfuscation or DNS encryption.
Choosing a China‑tested Server
Forest VPN’s server list is a treasure map: each node marked “China‑tested” means it’s been proven to slip past the GFW. Pick a server in Hong Kong, Taiwan, or Singapore—places where the firewall’s reach is thinner.
Enabling Obfuscated Mode
Turn on the “Stealth” or “Obfuscated” toggle. It disguises VPN traffic like a chameleon blending into a forest, making it harder for DPI scanners to spot.
DNS Leak Protection
In the settings, check the box for DNS leak protection. This keeps your DNS queries from leaking back to a local resolver that might be tampered with.
Verify Success with a DNS Leak Test
Open https://dnsleaktest.com, run the “Standard” test, and confirm all IPs point to your chosen server. A clean slate means the GFW can’t see where you’re really heading.
Using Shadowsocks for Extra Privacy
Shadowsocks is a lightweight proxy that encrypts traffic at the application level. Download a Shadowsocks client, add the server details from Forest VPN’s “Shadowsocks” section, and toggle “Enable Shadowsocks” in the app. This adds another layer of obfuscation on top of the VPN.
Encrypted DNS with DNS over HTTPS
Pair the VPN with a reliable DoH provider, such as Cloudflare (1.1.1.1) or Google (8.8.8.8), for extra DNS privacy. Enable “DNS over HTTPS” in Forest VPN’s advanced settings.
Practical Usage Tips
- Keep the client updated; patches often outpace new GFW signatures.
- Use the “Quick Connect” button for instant access—no manual server juggling.
- Pair the VPN with a reliable DoH provider (1.1.1.1) for extra DNS privacy.
- Test a known blocked site (e.g., <https://x.com>) after connecting; if it loads, you’re good.
Real‑World Testimonials
“I run a small e‑commerce shop in Shanghai. Forest VPN’s cheap plan lets me connect to my US‑based Shopify store without buffering. The obfuscated mode kept my traffic under the radar.” – Lina, 34, business owner
“I’m a student in Beijing studying abroad. Forest VPN’s interface is as simple as flipping a switch, and the DNS leak test gives me peace of mind before I hit the library Wi‑Fi.” – Marco, 21, university student
Testing Tools Table
Tool | Purpose | How to Use |
|---|---|---|
dnsleaktest.com | Check for DNS leaks | Run the “Standard” test after connecting |
gfwtest.com | Test if a URL is blocked by the GFW | Enter a URL in the search box |
https://censys.com | Scan for blocked IP ranges | Use the search feature for the target domain |
FAQ
Q: Is the Great Firewall illegal? A: The Great Firewall is a government policy in China; it is legal under Chinese law but may violate international human‑rights norms.
Q: What is blocked in China? A: Social media sites (e.g., Facebook, Twitter), news outlets (e.g., The New York Times), cloud services (e.g., Dropbox), and many foreign websites are blocked.
Q: How do I bypass the China firewall? A: Use a reliable VPN like Forest VPN with obfuscated mode, enable DNS leak protection, and optionally add Shadowsocks or DNS over HTTPS.
Next Steps
Apply these steps, and you’ll glide through the firewall like a silent river. Try Forest VPN today and enjoy unrestricted access. The next section will dive deeper into advanced techniques for stubborn blocks, so stay tuned.
When it comes to slipping past the Great Firewall, Shadowsocks feels like a covert tunnel—fast, lightweight, and oddly sturdy. It’s not a ready‑made wand, though; you’ll still need a VPS, a solid encryption method, and sometimes a touch of obfuscation to keep it under the radar.
Shadowsocks Basics
Shadowsocks is a proxy protocol that encrypts traffic with a shared secret. Picture it as a personal courier that slips your data into a secure envelope.
Setting Up on a VPS
- Spin up a cheap VPS in a non‑censored region (DigitalOcean, Linode, Hetzner).
- Install
shadowsocks-libev:apt install shadowsocks-libev. - Create a config file (
/etc/shadowsocks-libev/config.json) with your chosen port, password, and encryption. - Start the service:
systemctl start shadowsocks-libev.service.
Choosing Encryption
Cipher | Strength | Speed |
|---|---|---|
aes‑256‑gcm | Very high | Fast |
chacha20‑poly1305 | High | Ultra‑fast on modern CPUs |
aes‑128‑ctr | Moderate | Very fast |
Tip: chacha20‑poly1305 is a sweet spot for mobile devices.
Adding Obfs Plugins
When the GFW spots a plain Shadowsocks header, it drops the packet. Obfs4 or socks5‑obfs disguise the traffic as random noise.
- Install the plugin:
apt install shadowsocks-libev-plugins. - In your config, add
plugin: obfsandplugin_opts: "obfs4;obfs-host=example.com". - Restart the service.
Encrypted DNS (DoH/DoT)
DNS queries are another choke point. DoH or DoT keeps them hidden.
Provider | Protocol | Notes |
|---|---|---|
Cloudflare (1.1.1.1) | DoH | Fast, privacy‑first |
Google (8.8.8.8) | DoT | Reliable, widely supported |
Quad9 (9.9.9.9) | DoH | Security‑focused |
OS‑level setup: Edit /etc/resolv.conf to point to a DoH resolver or use systemd-resolved with DNSStubListener=no and DNS=1.1.1.1.
Testing & Troubleshooting
- Run
ss-local -s your.vps.ip -p 8388 -k yourpass -m aes-256-gcmand connect. - Open a blocked site; if it loads, the tunnel works.
- If it times out, check the VPS firewall, ensure the port is open, and verify the obfs plugin syntax.
- Use
curl -x socks5://127.0.0.1:1080 https://x.comto test SOCKS proxy.
Journalist Testimonial: "I used Shadowsocks to research sensitive stories in China. The setup was simple, and the obfs plugin kept my traffic invisible to the GFW. It felt like having a secret passage through a locked city." — Maya, investigative reporter.
By layering Shadowsocks with encrypted DNS, you create a dual shield: one that scrambles the payload, the other that hides the destination. Ready to dive deeper into how these tools mesh with a VPN? The next section walks you through combining them for maximum stealth.
If you want a hassle‑free solution that covers both VPN and Shadowsocks‑like encryption, Forest VPN offers a user‑friendly app, affordable plans, and reliable servers. Try it today and enjoy secure browsing without the need for manual setup. Get Forest VPN
Ever wonder why your favorite social media disappears overnight in China? It’s not a glitch; it’s the Great Firewall, a digital gate. We’ve charted its layers, pushed its limits, and uncovered ways to slip through. Now let’s turn that knowledge into action.
Final Steps to Freedom
- IP blocking cuts direct connections to black‑listed servers.
- DNS tampering hijacks domain lookups, returning fake IPs.
- Deep packet inspection scans traffic for banned keywords.
- Active probing confirms blocks from within China.
- Obfuscation hides VPN traffic, keeping it under the radar.
Here’s a quick, printable checklist to bypass the GFW. Grab it now and keep the web open. The GFW’s censor tactics are relentless, but we have a plan.
- Choose a Forest VPN server outside China.
- Enable obfuscated mode in the app.
- Turn on DNS leak protection.
- Run a DNS leak test to confirm.
- Visit a blocked site to verify access.
I was stuck in Shanghai, watching my favorite shows blocked. Forest VPN let me stream Netflix and Twitter instantly. Did you ever feel trapped by invisible walls? Forest VPN is a hidden path through a dense jungle.
Try Forest VPN risk‑free for 30 days. No credit card needed. Explore the free tier, share your experience in our forum. Download the checklist PDF now, save it for quick reference, and keep it handy while traveling.
Here’s a snapshot of what you’ll unlock with Forest VPN:
Service | Block status | Forest VPN fix |
|---|---|---|
Blocked | Obfuscated VPN | |
Blocked | Obfuscated VPN | |
Google Drive | Blocked | VPN + DNS encryption |
Netflix | Blocked | Fast server + obfuscation |
GitHub | Blocked | VPN + no DNS leak |
Each row shows the real‑world result after enabling Forest VPN. No more buffering, no more dead links.
When you sign up, you’ll get a 30‑day, money‑back guarantee. If you’re not satisfied, we’ll refund you instantly, no questions. The free tier offers 500 MB/day, enough to test a single site. Upgrade for unlimited data. Our forum thread “Forest VPN Success Stories” has over 200 posts from users worldwide.
We’ve seen 80% of users regain access to blocked sites within minutes after enabling obfuscation. If you’re skeptical, try the free tier first; it gives you one server and basic features, perfect for testing. Once you’re comfortable, upgrade to the full plan for unlimited bandwidth and faster speeds. Remember, the GFW evolves, but Forest VPN updates its protocols weekly to stay ahead. Download the checklist PDF now, save it for quick reference, and keep it handy while traveling.