The Great Firewall kills plain OpenVPN and WireGuard. What still works, per current research.
Short answer: Every provider on this page documents obfuscation - the GFW fingerprints plain OpenVPN and WireGuard, so only TLS-tunnelled or hardened protocols survive its detection waves. Set up and test before you enter the country.
providers on this page: 18 · independent audit on file: 67% · court-proven no-logs: 1 · open-source apps: 33%
quick picks
The most honest VPN on the internet, and in 2026 still the one this industry is measured against: numbered accounts, cash or Monero accepted, open-source…
The anti-affiliate champion candidate holds up: no affiliate program (stated out loud on the homepage), flat honest pricing, quarterly warrant canary, annual…
cryptostorm.is is verifiably LIVE (fetched today, HTTP 200) with a PGP-signed warrant canary dated July 1, 2026 and an unbroken Wayback snapshot record…
Community-run Italian operator with the best power-user transparency stack in the business: fully open-source Eddie client (GPL-3.0), 258 bare-metal entry IPs…
The most honest mainstream deal in 2026: open-source apps, real audits, a genuinely usable free tier with no data cap, and a transparent renewal model - and in…
A rare genuinely usable free plan (no card, P2P allowed on the 10 GB free tier) plus audited no-logs claims twice over - DefenseCode 2015 and Securitum 2024…
A genuinely interesting infrastructure story wrapped in a jurisdiction problem: Golden Frog built one of the few fully self-owned server networks and invented…
The only consumer VPN with a real metadata-protection architecture - a 5-hop noise-generating Sphinx mixnet with cover traffic - and it costs just $4/mo on the…
The freemium that actually respects you: a 10 GB free tier, transparent $9/$69 pricing with no renewal rug-pull, open-source Linux CLI, and a CEO who publicly…
The most expensive mainstream VPN ($300 per 2 years, $30/mo monthly) with the most hostile refund stance: 'All sales are final and refunds are not possible…
The friendliest VPN on the market and the only one with a published annual independent audit habit (Cure53 since 2017), but that honesty buys less privacy than…
Unlimited devices and a genuinely documented 2025 Deloitte ISAE 3000 no-logs audit - the strongest paper trail in the Kape/Nord orbit. But it is half of the…
A small, quiet Swedish outfit with an honest-ish pitch: no audit, no circus, 10 simultaneous devices, port forwarding, AnyConnect-style obfuscation and a…
The most expensive VPN in the room wearing the most auditing laurels: $8.33/mo forever after a $2.99 teaser, owned by Kape Technologies (ex-Crossrider adware…
Cheap ($2.19/mo intro on 26 months, renews at $56.94/yr = ~2.2x), Romanian-based, and one of few Kape brands whose no-logs claim is Deloitte-audited - but the…
The most polished sales machine with the most compromised track record: a 2017 CDT complaint to the FTC - built on Carnegie Mellon research - documented…
A privacy veteran with real strengths - 8 devices, serious obfuscation stack (Stealth/Stunnel/Shadowsocks/OpenConnect), crypto payments, dedicated IPs and port…
A strong everyday VPN with a huge live-verifiable network (7,287 servers in 150 countries counted in the official API on 2026-10-01) and a genuine audit…
Encryption is not the contest. The Great Firewall fingerprints the first packets of a connection and probes servers that look suspicious[2], so plain OpenVPN and plain WireGuard - however strong their cryptography - die in seconds. 18 of the 18 providers on this page ship a documented obfuscation layer precisely because of that.
Three families dominate. VLESS/Reality - open protocol, borrows a real TLS handshake from an unrelated site, actively probed servers answer like the borrowed site[3]. AmneziaWG - WireGuard with randomized handshake shapes[4]. And the proprietary stealth protocols from the big commercial providers - Astrill's StealthVPN has the longest continuous record inside China; NordVPN's NordWhisper arrived in 2025 mimicking ordinary web traffic; Surfshark's Dausos followed in 2026 with community skepticism about its closed cryptography[6]. Mullvad takes a fourth road: Shadowsocks and V2Ray bridges[5] instead of a home-grown protocol.
Install and configure before departure - the provider's website and app listings are themselves blocked inside the wall. Bring at least two providers with different protocol families, because a detection wave can take out one class overnight while the other survives. Test the obfuscation mode specifically: the default app mode is often the plain, fingerprinted one. Know the fallbacks that need no VPN - Tor bridges and domain-fronting tools trade speed for independence. And keep expectations calibrated: Freedom House rates China the worst internet-freedom environment measured[7], and the wall's operators are a well-funded adversary that iterates[1].
The censored-network problem is bigger than China. Iran and Russia run protocol-aware filtering with their own detection waves - Russia throttles TLS-in-TLS patterns, Iran blocks by server IP ranges; the UAE regulates by law before touching packets. The mechanics you learned here transfer, the legal risk does not: read the country pages for jurisdiction specifics before you connect, and remember that obfuscated tools are illegal to sell in some of these countries even where personal use is tolerated. 44% of this page's providers sit outside the Five/Eyes alliances - a separate consideration for which exit jurisdiction you trust.
Anything written outside the wall describes the last detection wave, not the next one. Our data records what providers document and what measurement research observes[8]; it cannot certify tomorrow. If your trip is high-stakes, layer methods - a commercial provider with obfuscation as primary, an open-protocol tool as fallback, and offline work as the real plan. The leak test and the country guides cover the rest of what travel through censored networks exposes, and the free-trap hub explains why the free VPNs that promise China access are the fastest way to become the product.
"Reliably" is doing heavy lifting. The GFW runs detection waves - during sensitive political periods it can cut most tools for days. Astrill's StealthVPN, the VLESS/Reality stack and AmneziaWG have the best track records right now, but every tool degrades and recovers. Set up and test before you arrive; nobody can guarantee a protocol from outside the wall.
Their handshakes have known, stable shapes. The GFW fingerprints first packets and probes suspected servers - an unobfuscated protocol is identified within moments of connecting[1]. Encryption strength is irrelevant; the wall kills connections by shape, not by content. This is why every provider on this page ships an obfuscation layer.
It proxies traffic through a TLS handshake that borrows a real website's certificate presentation, so the connection looks like ordinary HTTPS to a censor and survives active probing[3]. It is the strongest open-protocol option; consumer VPNs wrap similar ideas in proprietary stealth modes (NordWhisper, StealthVPN, NoBorders).
All 18 providers on this page document obfuscation - examples: NordVPN (Obfuscated Servers, NordWhisper), ExpressVPN (Lightway TCP mode), Surfshark (NoBorders), Proton VPN (Stealth), Mullvad (Shadowsocks bridges, V2Ray), Astrill (StealthVPN), AirVPN (SSL/SSH tunnel layers) and Windscribe (Stealth/WStunnel). The full list with protocol names sits on each provider page.
For foreigners: mostly inconvenience - confiscation is rare, but unlicensed VPN use exists in a legal gray zone that tightens unpredictably. For residents: formally, only licensed VPNs are legal, and enforcement targets sellers more than users. Don't help strangers set anything up, keep the install quiet, and assume your hotel network logs everything[7].
Before, always. VPN provider sites and their app-store listings are blocked inside China, so you often cannot download the client - let alone pay for it - once you land. Install the app, configure the obfuscation mode, and test it from a censored network simulation. Bring a second provider as fallback, because detection waves take out individual protocols.