Exposing and Circumventing SNI-based QUIC Censorship of the Great Firewall of China#

Ali Zohaib et al., University of Massachusetts Amherst / GFW Report / University of Colorado Boulder / Stanford University — Core

• Why: A rigorous measurement of a nation-state QUIC-blocking system reveals a real architectural weakness (decryption overhead collapses effectiveness under load) and a real weaponization risk (it can be triggered to block arbitrary UDP traffic between third parties) — directly relevant to anyone reasoning about QUIC/UDP behavior at the network edge.
• What: The GFW decrypts QUIC Initial packets at scale to apply SNI-based blocking, using a blocklist distinct from its other censorship mechanisms; the paper finds this decryption is computationally expensive enough to fail under moderate traffic and can be weaponized to block unrelated UDP traffic. Circumvention strategies were integrated into Firefox, quic-go, and major circumvention tools. (from abstract only)
• How: Active measurement characterizes what triggers GFW QUIC blocking; the weaponization angle exploits the same decryption-at-scale mechanism against arbitrary third-party UDP flows. (from abstract only)
• Where applicable: General for QUIC/UDP traffic traversing state-level middleboxes; the weaponization finding is a general lesson about any inline-decryption censorship/inspection architecture, not GFW-specific.