
Propose strategies to detect poisoned responses that can (1) sanitize poisonedĭNS records from the cache of public DNS resolvers, and (2) assist in theĭevelopment of circumvention tools to bypass the GFW's DNS censorship. Popular public DNS resolvers, such as Google and Cloudflare. We found 77K censored domains with DNS resource records polluted in Using data from GFWatch, we studied the impact of GFW blocking on the globalĭNS system. We also observe bogus IPv6 and globally routable IPv4Īddresses injected by the GFW, including addresses owned by US companies, such We further reverse engineer regular expressions used by the GFW andįind 41K innocuous domains that match these filters, resulting in overblocking Largest number of domains tested and censored domains discovered in the To the best of our knowledge, this is the Which we tested an average of 411M domains per day and detected a total of 311Kĭomains censored by GFW's DNS filter. We present the results of running GFWatch over a nine-month period, during Millions of domains daily, enabling continuous monitoring of the GFW's DNS


Large-scale, longitudinal measurement platform capable of testing hundreds of

However, most prior studies of China'sĭNS filtering were performed over short time periods, leading to unnoticedĬhanges in the GFW's behavior.
GREAT FIREWALL OF CHINA PDF
Download a PDF of the paper titled How Great is the Great Firewall? Measuring China's DNS Censorship, by Nguyen Phong Hoang and 8 other authors Download PDF Abstract: The DNS filtering apparatus of China's Great Firewall (GFW) has evolvedĬonsiderably over the past two decades. US Commerce Secretary Gina Raimondo said that the Biden administration 'wont tolerate' an effective ban on sales of Micron memory chips in China, despite efforts last week to calm the escalating tensions between the two nations.
