# Great Firewall The combination of legislation, technology, and administrative practice by which the People's Republic of China censors, filters, and surveils the internet within its borders — the world's most sophisticated and comprehensive system of state information control. The nickname puns on the Great Wall; the formal program it grew out of is the **Golden Shield Project**, launched by the Ministry of Public Security around 1998 and operational from the mid-2000s. Oversight shifted in 2013 to the **Cyberspace Administration of China (CAC)**. The computer scientist **Fang Binxing** is widely dubbed the "Father of the Great Firewall." ## How it works The Great Firewall is not a single wall but a layered toolkit applied at the network chokepoints where China connects to the global internet: - **DNS poisoning / spoofing** — returning false or dead addresses for banned domains, so requests for blocked sites simply fail. - **IP blocking and null-routing** — dropping traffic to and from blacklisted servers. - **Deep Packet Inspection (DPI)** — examining the contents (not just the addresses) of data packets to detect sensitive keywords in URLs and payloads, then resetting or dropping the connection. - **Keyword filtering and SNI/TLS inspection** — blocking on banned terms and, increasingly, on the metadata of encrypted connections. - **Throttling and protocol fingerprinting** — slowing or detecting circumvention tools (VPNs, Tor, Shadowsocks) by recognizing their traffic signatures. The system blocks most major Western platforms (Google, [[YouTube]], Facebook, X, Wikipedia at times, and countless news outlets) and is paired with aggressive *domestic* platform censorship, where Chinese companies are legally required to police their own users' content. A related offensive tool, the **Great Cannon**, sits alongside the firewall and can hijack foreign web traffic to launch distributed-denial-of-service attacks — notably used in 2015 against GitHub and the anti-censorship group GreatFire. ## A model for export The Great Firewall matters beyond China because it is the working proof-of-concept for **digital authoritarianism** — the demonstration that a modern state can have a thriving internet economy *and* near-total information control. China actively exports the model: training foreign officials, supplying equipment, and shaping a vision of "cyber sovereignty" (the doctrine that each state should control its own slice of the internet) that fragments the global network into a *splinternet*. Leaked documents from the firm Geedge Networks in 2025 revealed China marketing a turnkey "Great Firewall in a box," with reported deployments to [[Kazakhstan]], Ethiopia, Pakistan, and Myanmar. ## Right-wing-KB relevance The Great Firewall is the state-scale, territorial counterpart to the privatized, cross-border surveillance of [[Commercial Spyware]], and a core exhibit in this vault's coverage of authoritarian information control and the [[Surveillance State]]. It supplies the template that backsliding democracies and autocracies worldwide look to when they seek censorship and monitoring at national scale, and it anchors the "cyber sovereignty" argument that authoritarian governments (and some Western nationalists) advance against the open, U.S.-centric internet. Watching which governments adopt Great-Firewall-style controls is a leading indicator of digital-authoritarian drift. ## Distinct from neighbors - **[[Surveillance State]]** — the broader monitoring apparatus; the Great Firewall is its *network-censorship-and-filtering* layer specifically. - **[[Commercial Spyware]]** — privatized, targeted, exportable device intrusion; the Great Firewall is state-run, territorial, mass-scale traffic control. - **Content moderation** — platform-level rule enforcement; the Great Firewall is *state-mandated* blocking enforced at the national network boundary. - **Splinternet / cyber sovereignty** — the governance *doctrine* of a fragmented internet; the Great Firewall is its most fully-realized *implementation*. ## See Also - [[Surveillance State]] - [[Commercial Spyware]] - [[China]] - [[Cybersecurity Lexicon]] - [[Surveillance Lexicon]]