Skip to main content
PTS Managed Services

· Updated · 10 min read · china-it · By

Top 10 Things to Know About VPNs in China (2026)

The top 10 things to know about VPNs in China in 2026 — what's legal, what's grey, and the compliant corporate routes: licensed circuits and SD-WAN.

On this page

Top 10 Things You Need Know Before Using a VPN in China

Are you planning on using a VPN in China? Want to figure out what is a VPN that works in China? PTS brings you the top 10 things you need to know about VPN services in China — including the honest answer on which routes are actually compliant for business use. With strict regulations on VPN usage and alternatives like SD-WAN, it’s important to understand how China controls this technology before choosing a solution for your business. Here’s what you need to know to keep your business connected and compliant in one of the world’s most heavily regulated environments.

Using a VPN in China

  1. Legal Compliance is Mandatory. Is using a VPN legal in China? Yes, in China, the use of VPNs is legal but only if they are government-approved which is quite different to most of the rest of the world. Businesses (and anyone else) must use a VPN service that complies with local regulations, which often require cooperation with government monitoring and data access. Using unauthorised VPNs can result in severe penalties for both service providers and businesses.
  2. Choosing the Right Provider. Ensure your VPN service provider is authorised by the Chinese government. Any authorised VPN in China must comply with regulations that include allowing government oversight, which may impact privacy but is essential for legal compliance. So when asking is this a good VPN to use in China? The answer is often, yes if it is a highly compliant VPN.
  3. Corporate VPN Usage. VPNs are commonly used by foreign-invested enterprises in China to maintain secure communication with global offices. However, these VPNs must be established through authorised telecommunications operators and used exclusively for internal business purposes.
  4. Service Reliability Issues. VPN services in China can be unreliable at times, especially during politically sensitive periods or major national events. Businesses should be prepared for potential disruptions and consider robust VPN solutions that offer higher reliability and security.
  5. Government Access and Privacy Concerns. One significant concern that is often aired is the mandatory government access to data transmitted through any authorised VPN in China. This can lead to privacy issues especially in the eyes of western businesses who are more used to the expectation of complete privacy, this makes it essential for businesses to evaluate the trade-offs between legal compliance and potential data security risks when integrating or connecting to your foreign entities. The wider data laws in China and Hong Kong shape what is permitted here.
  6. Targeted Enforcement. The Chinese government primarily targets VPN providers rather than individual users. However, businesses caught using unapproved Chinese VPN services may still face fines or other penalties, so it bears repeating that it’s advisable to stay within the legal framework.
  7. Internal Security Protocols. To ensure compliance with Chinese regulations, businesses should implement robust internal security protocols. This includes monitoring and restricting the use of VPNs in China, maintaining logs, and setting up internal firewalls to block unauthorised access.
  8. Contingency Planning. Given the potential for VPN service interruptions, businesses should develop and test contingency plans. This may include alternative communication methods or backup systems to maintain operational continuity during disruptions.
  9. Cost Implications. Using authorised VPN services might involve higher costs due to the stringent compliance requirements and the need for additional infrastructure. Businesses should budget accordingly and consider the financial impact of maintaining compliance.
  10. Regular Audits and Updates. Continuous compliance with VPN regulations requires regular audits and updates to your VPN setup. This includes ensuring that all software and hardware are up to date and that your VPN usage aligns with the latest legal requirements. These requirements may well be subject to sudden or unpredictable change.

Key Points on VPN Regulations in China

  • Approval Requirement: The use of VPN in China is legal only if the service is registered with the government. Unauthorised VPNs, including many popular international services, are considered illegal and due to their unreliability they are also impractical in a business setting.
  • Restrictions on IP-based VPNs: The Chinese government has specifically prohibited IP-based VPNs. Instead, it allows VPNs that are implemented using MPLS (Multiprotocol Label Switching) or SD-WAN (Software-Defined Wide Area Network) technologies. This shift aims to enhance control over internet traffic and data security.
  • Enforcement Focus: While the law primarily targets VPN providers, individuals using unauthorised VPN in China can also face penalties. Reports indicate that individuals have faced fines or other repercussions.
  • Operational Challenges: Many foreign VPN services face blocking or throttling due to the Great Firewall, making it difficult for users to maintain stable connections. This is particularly pronounced during politically sensitive times.

VPN Options for Business in China: Compliant Routes vs Grey Areas

So what is the best VPN to use in China? The answer isn’t based on the criteria you would use anywhere else — security, performance, features. For a foreign business operating in the Mainland, the only genuinely compliant routes run over licensed infrastructure from authorised Chinese telecommunications operators: licensed cross-border circuits (MPLS or IPLC) or SD-WAN through ICP-licensed providers. That is how serious enterprises connect China sites to global systems — we design and run exactly these architectures as part of our IT services in Mainland China. Everything else involves compromise, and some of it involves legal risk.

The compliant route — licensed operators:

  • China Telecom: One of the major telecommunications operators in China, offering VPN and cross-border connectivity services that comply with local regulations. As a major state carrier, China Telecom is a safe bet for compliant business connectivity.
  • China Unicom: Another state-owned telecommunications provider offering compliant VPN and circuit solutions for businesses in China.
  • China Mobile: Also offers VPN services tailored for enterprises, adhering to the regulatory framework set by the government.
  • Cisco AnyConnect: Cisco’s VPN client is widely used by enterprises globally and familiar to most IT teams. Be clear about what makes it compliant though: the client software itself does not — the legality comes from the underlying connectivity being provisioned through an authorised Chinese operator. AnyConnect running over an unlicensed cross-border link is no more compliant than any other unapproved VPN.

The grey area — consumer and international VPN services:

  • Perimeter 81, Astrill, ExpressVPN and similar international services are often suggested for China, and some intermittently work. Be honest with yourself about what they are: none of these is a Chinese government-approved service, and configuring them differently does not make them one. Individual travellers use them at their own judgement; relying on them for corporate connectivity in the Mainland is legally grey, operationally fragile (expect blocking or throttling, especially during politically sensitive periods), and leaves your business with no recourse when the connection dies. If your China operation matters, put it on licensed infrastructure instead.
  • Please note that provider status and regulations change at short notice. If in doubt, verify directly with the operator that the service is provisioned through an authorised channel before you depend on it.

Exploring SD-WAN as an Alternative for Businesses in China

While VPNs are a common choice for secure business communications, SD-WAN (Software-Defined Wide Area Network) solutions offer a reliable and more robust alternative for companies operating in China. SD-WAN provides a flexible, compliant, and high-performance option for connecting users to applications across multiple locations. Here’s what you need to know about implementing SD-WAN in China. However, as with VPN services, they are still subject to heavy regulations and limited approved choices.

Compliance with Chinese Regulations

  • Government Restrictions: The Chinese government permits the use of VPNs only when implemented using MPLS (Multiprotocol Label Switching) or SD-WAN technologies. Traditional IP-based VPNs are no longer allowed.
  • Regulatory Approval: SD-WAN providers in China must obtain approval from authorised telecommunications operators. This involves complying with strict regulations, such as enabling government access to transmitted data.

Architecture and Connectivity

  • Twinned Network Architecture: SD-WAN solutions in China typically use a dual-network approach. One network operates within China, while another connects the rest of the world. This ensures compliance and optimal performance.
  • Local and Global Integration: Sites within China connect to the SD-WAN using IPsec tunnels over local broadband internet. The connection to the global SD-WAN network is established via dedicated circuits, often routed through Hong Kong, Singapore, or other approved locations outside mainland China.
  • Cost Efficiency: This layered approach allows businesses to leverage low-cost local broadband at the edge, reducing the need for expensive MPLS circuits while maintaining compliance with local laws.

Management and User Experience

  • Unified Management Portal: Businesses can manage their Chinese and global sites through a single pane of glass within the SD-WAN provider’s portal. This simplifies network management and enhances visibility across the entire network.
  • Seamless Integration: For users, Chinese sites are integrated into the global SD-WAN without requiring additional configurations, offering a smooth and unified experience.
  • Optimised Performance: SD-WAN solutions utilise software-defined networking capabilities, providing centralised control, real-time visibility, and traffic optimisation for enhanced application performance.

Advantages of SD-WAN in China

  • Regulatory Compliance: SD-WAN solutions ensure that your business adheres to Chinese regulations while maintaining reliable and high-performance connectivity.
  • Cost Savings: By utilising local broadband instead of more expensive MPLS circuits, SD-WAN can significantly reduce operational costs.
  • Improved Performance: SD-WAN dynamically optimises traffic, selecting the best paths to ensure optimal application performance and user experience.
  • Simplified Management: Compared to traditional WAN architectures, SD-WAN offers streamlined management, reducing overhead and complexity.

SD-WAN Providers Commonly Used in China

  • China Telecom: As a major telecommunications provider, China Telecom offers SD-WAN solutions that are compliant with Chinese regulations.
  • Nirad Networks: This provider is noted for its SD-WAN solutions in China.
  • ZeroTier: Known for its flexible networking solutions, ZeroTier is also cited among SD-WAN options used in China.
  • Big Network: Another provider offering SD-WAN solutions within the Chinese market.
  • OPNsense: Offers open-source SD-WAN capabilities that are available in China.
  • FlexPrem SD-WAN: Provides SD-WAN solutions tailored for the Chinese market.
  • Megaport: Known for its network solutions, including SD-WAN, operating in China.
  • COSGrid Networks: Offers SD-WAN services in China.

A list like this is a starting point, not a statement of licence status. What makes an SD-WAN deployment compliant in China is the underlying connectivity — a licensed circuit from a Chinese carrier, or a provider operating through an ICP-licensed channel. Before committing, verify directly with your chosen provider how their China connectivity is provisioned and licensed, especially regarding data security and network access by Chinese authorities.

SD-WAN solutions in China provide a compliant and efficient virtual network by leveraging a combination of local broadband, dedicated circuits, and a twinned architecture that separates the Chinese network from the global SD-WAN. This approach enables enterprises to enjoy the benefits of SD-WAN technology, such as cost savings, improved performance, and simplified management, all while ensuring adherence to Chinese regulations.

The information provided in this article is for general informational purposes only and is not intended to serve as legal advice. The content is based on general knowledge and should not be relied upon for making legal or business decisions. Readers are encouraged to consult with a qualified legal professional to obtain advice tailored to their specific circumstances and to ensure compliance with applicable laws and regulations. The author and publisher of this article disclaim any liability for any actions taken or not taken based on the information provided.

PTS can help you to navigate this with hands-on IT support for your business

Tags:

cybersecuritymanaged-itcompliancechina

Relevant service

Managed IT Services in China

On-the-ground IT in Mainland China — Shanghai entity, Mandarin engineers, compliant cross-border setup.

Explore the service →

Related reading

Want practical help on this?

Tell us what you're trying to do. We'll come back with practical advice and, where it helps, a costed proposal — no sales pitch.

Talk to PTS

Practical, costed proposal · No obligation

Call Request a proposal