China operates the most sophisticated internet censorship system in the world, commonly called the Great Firewall (officially, the Golden Shield Project). It does two things at once: it blocks a vast list of foreign websites and apps, and it actively hunts for the tools people use to get around it. Understanding both halves is the key to staying connected.
What the Great Firewall blocks
The blocklist runs to thousands of domains, but the pattern is consistent: anything that carries uncensored information or private communication is a target. Google and its entire ecosystem, all major Western social platforms, encrypted messengers, and a long list of news outlets are inaccessible from a normal connection inside mainland China. The table above summarizes the services travelers most often lose access to.
Crucially, the Firewall also inspects the type of traffic leaving the country. Using deep packet inspection (DPI), it fingerprints the handshake patterns of common VPN protocols and throttles or drops connections that match — which is why a VPN that works perfectly at home can go dead the moment you connect from Shanghai or Beijing.
How people stay connected
The reliable answer is a VPN with obfuscation. Obfuscation disguises your VPN traffic so it looks like the ordinary encrypted HTTPS traffic the modern web runs on. There is no obvious VPN signature for DPI to catch, so there is nothing to block. This is exactly what Veilock’s censorship-bypass technology is built for.
Set up before you arrive
This is the single most common mistake. VPN websites and app stores are blocked inside China, so if you wait until you land to install one, you may not be able to. Before you travel:
- Create your account and download the app while you still have open internet.
- Install it on every device you’ll bring.
- Confirm you can connect using the obfuscated TCP option, which is hardest for the Firewall to detect.
- Save your login details offline.
Troubleshooting inside China
If your connection drops or won’t establish:
- Switch to obfuscated TCP if you were on UDP — TCP is more resilient against DPI.
- Change server location — the Firewall sometimes targets specific endpoints; another city or country often restores access.
- Reconnect at a different time — blocking intensity varies, especially around politically sensitive dates.
- Update the app before you travel — obfuscation techniques evolve, and the latest build matters most here.
The legal picture
VPN legality in China is a genuine gray area. Only government-approved VPNs are technically sanctioned, and those defeat the purpose by remaining subject to state monitoring. In practice, millions of residents and visitors use unauthorized VPNs daily, and enforcement is aimed at providers rather than individual tourists. Still, the law can change and you are responsible for your own risk assessment — check the current situation before you go.
The bottom line
China blocks more of the open internet than almost anywhere on earth, and it specifically targets the VPNs people use to get around it. The only dependable path through is an obfuscated, censorship-resistant VPN installed before you arrive. Veilock was built for exactly this challenge — see our best VPN for China guide for setup details.
What's blocked in China
| Service / app | Status | Notes |
|---|---|---|
| Google (Search, Gmail, Maps, Drive) | Blocked | All Google services inaccessible |
| YouTube | Blocked | Use domestic Bilibili/Youku instead |
| Blocked | WeChat is the local standard | |
| Instagram / Facebook / X | Blocked | All major Western social blocked |
| Western news (NYT, BBC, Bloomberg) | Blocked | Many outlets blocked entirely |
| Signal / Telegram | Blocked | Encrypted messengers targeted |
| Most standard VPNs | Detected & blocked | Obfuscation required |