technology
Iran's Underground VPN Market Expands Amid Ongoing Internet Shutdown
Iran has experienced a nationwide internet shutdown, limiting access to less than 2% of the population, primarily through privileged 'white SIM cards.' An underground market for VPN configurations has surged, with prices ranging from 500,000 to 1 million tomans per gigabyte. Users face risks including surveillance by providers and increased scams in this high-demand environment.
Apr 5, 6:34 AM·2m read1 source
Substrate placeholder — needs reviewAudio version
Tap play to generate a narrated version.
Iran imposed a widespread internet shutdown that continues as of the latest reports, severely restricting online access across the country. Network traffic monitoring services indicate that fewer than 2% of Iranians are currently connected to the internet.
This limited connectivity largely involves users with 'white SIM cards,' which are government-issued lines with fewer restrictions provided at official discretion.
' This confirms the selective nature of access during the shutdown. The shutdown affects millions of ordinary citizens, businesses, and essential services, disrupting communication, education, and economic activities nationwide.
In response, an underground market for virtual private networks (VPNs) and connection configurations, known as 'configs,' has expanded rapidly. These configs are files used to set up internet connections, with prices reaching 500,000 to 1 million tomans per gigabyte, equivalent to approximately £7 to £15.
The market operates through platforms like Telegram channels, where sellers offer pre-configured setups for users with varying levels of technical expertise.
Effective tools in this environment differ from traditional VPNs by employing multiple pathways and communication layers to bypass blocks. Methods gaining attention include DNS tunnelling via DNSTT and NoizDNS, slipstream techniques for routing QUIC traffic over DNS, HTTPS-based tunnelling with NaiveProxy, SSH connections, and DNS encryption via DoH.
Some services combine these, such as layering SSH over Slipstream, NoizDNS, or NaiveProxy, to enhance encryption and prevent DNS leaks. These flexible approaches allow data rerouting when paths are disrupted, maintaining connectivity in multi-layered network restrictions.
