Approximately 600 GB of data related to the functioning of the Great Firewall of China (GFW) has been made publicly available. The archive includes about 500 GB of RPM packages from a private repository repo.geedge.net, various documentation on operation and structure, as well as compressed (zstd) archives containing a git repository with code (63 GB, including code for DPI systems to inspect traffic), documentation (50 GB, over 100,000 documents), and records from the Jira bug tracking system (2.7 GB). The information is available for direct download or via torrents.
Work is underway to analyze the documentation and code obtained from the leak. The first report with key findings is available, mainly related to the GFW implementation activities in other countries, the infrastructure composition for traffic blocking, and general information about the website blocking organization and VPN, as well as bandwidth throttling, tracking of TLS sessions, detection of hidden tunnels and bypass methods, user monitoring, traffic matching with real users, modification of HTTP sessions, and traffic substitution.
The data was obtained from a leak within Geedge Networks and the MESA Lab at the Institute of Information Engineering of the Chinese Academy of Sciences, which were involved in the supply and development of solutions based on the GFW. In addition to China, traffic inspection systems using GFW technology have been implemented in Myanmar, Pakistan, Kazakhstan, and Ethiopia. For example, in Myanmar, a GFW-based traffic inspection system is deployed in 26 data centers, integrated into major traffic exchange points, and monitors 81 million simultaneous TCP connections per second.
Source: opennet.ru
