# 3️⃣ Bring up the WireGuard interface (named wg-unblock) sudo wg-quick up "$WG_CONF"

Welcome to – your go-to collection of games, tools, and apps that work on school, work, or restricted networks.

| Goal | One‑Liner (Windows) | One‑Liner (macOS/Linux) | |------|----------------------|--------------------------| | | netsh interface ip set dns "Wi‑Fi" static 1.1.1.1 | sudo networksetup -setdnsservers Wi‑Fi 1.1.1.1 | | Quick VPN (Mullvad CLI) | mullvad-exclude start && mullvad tunnel start us-nyc | sudo mullvad tunnel start us-nyc | | Tor Browser | Download from https://www.torproject.org and run. | Same – just drag to /Applications . | | Self‑hosted Caddy reverse‑proxy | docker run -d -p 80:80 -v $(pwd)/Caddyfile:/etc/caddy/Caddyfile caddy | Same command on Linux/macOS. | | DoH in Firefox | Settings → Network Settings → Enable “Use DNS over HTTPS” → Cloudflare. | Same steps. |

| Provider | Why It’s Good in 2025 | How to Set Up | |----------|----------------------|--------------| | | No‑logs, WireGuard + OpenVPN, 10 GB/month free bandwidth for testing. | 1. Sign up → 2. Install the Mullvad app → 3. Choose a server outside your jurisdiction → 4. Connect. | | ProtonVPN (Free/Plus) | Swiss jurisdiction, Secure Core (multi‑hop). | Same steps as Mullvad; the free tier now includes 10 GB/month on three locations. | | IVPN | “Stealth” obfuscation (obfs4) to bypass deep‑packet inspection. | Follow the “Stealth” tutorial on the IVPN website. |

| Trend | Impact on github.io access | How to stay prepared | |-------|------------------------------|----------------------| | | Filters could start scanning page content (not just domain). | Use a VPN with obfuscation and a custom domain + CDN to hide the origin. | | Encrypted SNI (ESNI / ECH) | TLS handshake metadata (the server name) becomes encrypted, making domain‑based blocking harder. | Upgrade to browsers that support Encrypted Client Hello (ECH) (Chrome 124+, Firefox 126+). | | Decentralized DNS (e.g., ENS, Handshake) | Traditional DNS may become less central; block‑lists will shift. | Keep a DoH/DoT fallback and a local hosts file for critical sites. | | Edge‑only hosting | More projects will serve directly from CDNs (Cloudflare Pages, Vercel) rather than github.io . | Register a custom domain early; you’ll already be behind a CDN that’s harder to block. |