Update censorshipConfiguration for China
First time contributor checklist
- [x] I have read how to contribute to this project
- [x] I have signed the Contributor License Agreement
Contributor checklist
- [x] I am following the Code Style Guidelines
- [x] I have tested my contribution on these devices:
- Google Pixel 7, Android 14
- [x] My contribution is fully baked and ready to be merged as is
- [x] I ensure that all the open issues my contribution fixes are mentioned in the commit message of my first commit using the
Fixes #1234syntax
Description
As for China, currently only one front domain works: github.githubassets.com. Most of Google's IPs are blocked, and another 2 domain are blocked by DPI. Therefore, the circumvention works, but is very slow, because Signal has to wait for all others to time out before connecting to github.githubassets.com.
This patch:
- Updated fUrls to use less UGC websites, which is more likely to be blocked, and use more innocent websites.
- Set domain fronting configuration for China to Fastly.
-
fastly.jsdelivr.netis used by many programers on their blog, I belive the collateral damage is high. -
www.python.orgis also programer-related. -
www.gov.uk, lol.
My ISP is China Unicom (AS4837), I've built it and tested on my Google Pixel 7 with Android 14. The circumvention works smoothly... Besides the sign up or sign in process, it requires firebaseinstallations.googleapis.com, I set one alive IP in the hosts. For Signal, maybe hardcode or delivery alive IPs, I'm considering.
The pcap logs still have Google domains after a while, I guess there must something like cloud configurations, if so please change it too.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
This issue has been closed due to inactivity.
Why isn't this being implemented?
Probably we should firstly discuss this in support forum.