Mullvad to China: Block This. We Dare You

f0r3st 49 points 15 comments June 22, 2026
michael-dev-tech.github.io · View on Hacker News

Discussion Highlights (13 comments)

duttonw

Yep, agree, it does work and with multi hop also allows your own country of origin only when it’s through Sweden also.

wolvoleo

Eh they'll adapt. Simply using QUIC won't be enough. The cadence of VPN traffic can and will be detected. It might take them a while to catch up that's all. Best thing is to just not go to China, and if you do need to, to use your mobile internet or work VPN.

theragra

I read about Russian VPN situation from time to time, and any simple obfuscation attempts fail now. They had to invent more protocols, like TrustTunnel. Previous popular protocol was VLESS, and it used TCP. TrustTunnel uses QUIC and possibly UDP, looks like similar to what is described in the article. So, I guess, Mullvad might work in DPI-heavy environments, but I wouldn't be as sure as author is. All I know it is becomes harder and harder to obfuscate VPN traffic in the countries with good hackers who work for the government.

arcfour

Why would China use HTTP/3?

sitzkrieg

mullvad is the only vpn worth using

LoganDark

> Mullvad took their VPN traffic and wrapped it in QUIC obfuscation. To the CCP's omniscient routers, it doesn't look like a VPN trying to tunnel out. It just looks like boring, encrypted HTTPS web traffic. Ignoring that this article is shamelessly LLM-generated, I did not actually know Mullvad had QUIC obfuscation, so this is a cool fun fact. > Connect the dots here. The only way the Chinese government can block Mullvad now is to block all HTTP/3 traffic. If they do that, they instantly nuke their own banking sector, e-commerce platforms, and state infrastructure. No they don't. The amount of work it takes to have a HTTP/3 web server means those sectors probably don't even have it yet. Even if they did, I wouldn't expect HTTP/3 to be the only way to access anything , not even a decade from now. Even HTTP/2 was awful to get working when it was new, and I haven't heard of even a single server not accepting HTTP/1.1; you are still more likely to encounter servers not even supporting HTTP/2 yet, let alone HTTP/3.

smukherjee19

Clickbait and aggressive title, shallow article. I read it and not worth clicking.

thrdbndndn

Chinese people have been developing similar obfuscation protocols and playing a cat-and-mouse game for years, and most of them are "open source" (in quotes because lots of them have to be somewhat hidden because the Chinese gov threatens the devs). Props to Mullvad, but it's not like they're unique in this regard.

gmerc

AI slop writing.

xyzsparetimexyz

Last time I checked, they don't really care about vpns there. They just filter internet traffic to A) encourage home grown alternatives to e.g. Google, Facebook and B) Stop Grandma from reading Radio Free Asia

himata4113

Please flag and move on, don't engage in misleading and/or hallucinated AI blogs.

tiagod

1. This is obvious AI slop 2. China can just ban the Mullvad IP ranges. They don't change that often

cedws

Please declare if your blog post is written with AI, don’t launder AI words as your own, you just make yourself look like a fraud. We can tell.

Semantic search powered by Rivestack pgvector
11,301 stories · 106,340 chunks indexed