Mullvad VPN

Mullvad VPN: Why It's Blocked in China and How Users Respond

What Mullvad VPN Is

Mullvad VPN launched in 2009 as a Swedish VPN service operated by Mullvad VPN AB, a privately held company based in Gothenburg. The service has built a user base of several million active users globally, though exact figures remain undisclosed. Mullvad operates on a no-logs principle and accepts cryptocurrency payments to minimize user identification. The service is known among technical users for its straightforward approach: it does not claim to unblock streaming services, does not bundle with antivirus software, and publishes regular transparency reports.

Why Mullvad VPN Is Censored

Mullvad VPN is blocked in China under the framework established by the Ministry of Industry and Information Technology (MIIT) and enforced through the Great Firewall. China's regulatory stance treats unauthorized VPN use as a violation of the Telecommunications Regulations of the People's Republic of China, which mandate that all internet traffic routing must pass through state-approved gateways. The Chinese government does not publish a formal "banned VPN" list; instead, it dynamically blocks services deemed to circumvent content controls. Mullvad, as an open-source, no-censorship VPN, represents the exact threat model Beijing aims to eliminate.

While China is the primary enforcement jurisdiction, less-documented restrictions occur in Iran and Russia, where VPN blocking has intensified following political unrest and military operations that required information control.

How Mullvad VPN Is Technically Blocked

China employs multiple layered blocking methods against Mullvad:

DNS filtering is the first line. Queries for Mullvad's domain resolve to null or incorrect addresses within Chinese ISP networks, preventing users from locating the service's official infrastructure.

IP address blocking is more aggressive. Chinese authorities maintain blacklists of known Mullvad server IPs and block packets destined to those addresses at the border gateway level. This requires ongoing IP rotation by the service provider to remain functional.

Deep packet inspection (DPI) targets VPN protocol signatures. Mullvad's traffic, regardless of encryption, exhibits patterns that DPI systems recognize as VPN activity. The Great Firewall can identify and throttle or terminate connections matching these signatures, making the connection unreliable even if initial establishment succeeds.

SNI (Server Name Indication) filtering also plays a role when users attempt HTTPS connections to Mullvad infrastructure, as the unencrypted hostname reveals the intended destination.

User Workarounds in Restricted Regions

Users in censored countries employ several general techniques:

Bridge relays allow traffic to be routed through intermediate servers, obscuring the final destination and breaking DPI pattern recognition. These are effective temporarily until authorities identify and block bridge IPs.

Protocol obfuscation tools wrap VPN traffic in benign-looking packets (mimicking HTTPS or SSH) to evade signature-based blocking. This requires additional software layering and reduces connection speed.

Meek and similar domain-fronting techniques were previously effective but are becoming less reliable as blocking becomes more sophisticated.

Timing matters. VPN services regularly rotate infrastructure and deployment strategies; users who update frequently maintain access longer than static deployments.

Alternatives Less Censored in Affected Regions

Open-source WireGuard implementations, while not a traditional commercial VPN, see lower block rates in some regions because they have no centralized infrastructure to target and update frequently. However, WireGuard requires technical configuration and offers no customer support.

Tor Browser, while distinct from VPN technology, provides censorship resistance in China through pluggable transports like obfs4, though speeds are significantly lower and blocking remains active.

Self-hosted VPN solutions using standard protocols (OpenVPN, IKEv2) deployed on cloud infrastructure in non-censoring jurisdictions remain functional longer, though this approach demands technical expertise and carries cost.

Outlook: Restrictions Intensifying

China's blocking of VPN services is tightening, not easing. MIIT has formalized oversight, and detection techniques are improving. Mullvad and similar services face a continuous arms race where technical improvements meet increasingly sophisticated detection. Users should expect that no single tool remains reliably accessible without regular adaptation. The regulatory environment suggests governments will intensify blocking efforts as geopolitical tensions persist.