Great Firewall

The Great Firewall is a national system for controlling China’s connection to the global internet. Its foundations were established during the 1990s, when Chinese authorities combined telecommunications regulation with the construction of state-controlled international gateways. The system is not one device or program: it is a changing collection of network equipment, regulations, monitoring practices, and enforcement institutions.

China’s approach developed alongside the commercialization of domestic internet services. The government permitted extensive online commerce and communication while retaining authority over infrastructure, domain registration, news publication, and platform operators. Laws and regulations place substantial obligations on companies to remove prohibited material, preserve data, verify users in specified contexts, and assist lawful investigations.² This arrangement makes private firms part of the censorship apparatus rather than treating filtering as solely a border-control function.

The name “Great Firewall” is a metaphor linking the system to the Great Wall of China. It is widely used in technical research and public discussion, but Chinese regulatory documents generally describe particular controls—such as cybersecurity, information-content management, or internet-information services—rather than a single system with that English name.

The Great Firewall filters traffic through several technical methods that can be combined or adjusted as services change. Researchers have documented domain-name blocking, IP-address blocking, URL and keyword inspection, DNS tampering, connection resets, and selective interference with encrypted protocols.³ A request for a blocked domain may fail to resolve, connect to the wrong address, or be interrupted after a suspicious string is detected.

Filtering is especially effective at China’s international gateways, where a relatively small number of network chokepoints can affect traffic entering or leaving the country. The system also uses active probing: when traffic resembles a circumvention service, filtering infrastructure may attempt to connect to the suspected server and then block it. Technical measurements have found that some controls are probabilistic or temporary rather than uniformly applied, producing regional, provider-specific, and time-dependent differences.

Censorship also occurs inside domestic platforms. Search engines, social networks, video sites, and messaging services maintain keyword lists, automated classifiers, human-review teams, account sanctions, and mechanisms for responding to government notices. Consequently, a website can be reachable while particular posts, terms, images, or users remain unavailable.

The system’s broader function is to align online communication with the political and legal priorities of the Chinese state. Blocked or restricted subjects have included overseas news organizations, major social-media platforms, some search services, politically sensitive historical events, criticism of senior officials, and material authorities classify as separatist, extremist, pornographic, or otherwise unlawful.¹ The exact scope changes during elections, protests, public-health emergencies, diplomatic disputes, and other politically sensitive periods.

China’s model is often described as “cyber sovereignty”: the claim that states should control digital infrastructure and information within their borders. The Cybersecurity Law and related regulations place domestic network operators under duties involving security, data handling, and content governance.² These rules can create uncertainty because broad categories such as rumors or threats to social stability leave platforms considerable discretion in interpreting what must be removed.

The effects extend beyond direct blocking. Users may practice self-censorship, use euphemisms, migrate between platforms, or rely on private networks and proxy services. Researchers have also found that censorship can target calls for collective action even when the underlying criticism is not removed, suggesting that mobilization potential may matter as much as ideological disagreement.⁴

The Great Firewall is also a laboratory for internet measurement, protocol design, and censorship resistance. Academic projects such as the Open Observatory of Network Interference have developed tests for distinguishing blocking from ordinary outages, while the Citizen Lab has documented filtering techniques and their effects across providers and countries.³⁵

Blocking is not always total: some foreign services remain intermittently reachable, and content can circulate through screenshots, coded language, mirrors, virtual private networks, or commercial proxy products. Circumvention tools themselves are subject to disruption, and their use may carry legal or practical risks depending on the service and circumstances. The system can therefore be understood as a contest between filtering and adaptation rather than as a permanent, perfectly sealed border.

A further complication is that censorship technology developed in China has become part of international debates about digital governance. China has promoted principles of state authority over networks through international forums and technical cooperation, while other governments and civil-society groups have criticized the model for restricting expression and fragmenting the global internet.⁶ The Great Firewall thus has significance both as domestic infrastructure and as a model in the politics of cyberspace.

DNS poisoning

Interfering with domain-name lookups so that a requested website cannot be resolved correctly.

Deep packet inspection

Analysis of network traffic beyond basic addressing, sometimes including protocol characteristics or unencrypted content.

Cyber sovereignty

A state-centered view that governments should exercise primary authority over internet infrastructure and information within their territories.

Circumvention tool

A service or technique, such as a proxy or virtual private network, intended to route around network restrictions.