Turkey Censorship Megapost

i love censorship +50 social credit

written
2025-03-19T09:00:00Z
last modified
2025-03-20T13:46:56Z
tags
link
back to home

turkish internet censorship

providers

isp dns blocking dns modification ip blocking wireguard blocking
turknet yes yes no no
turkcell yes ? yes* no
turktelekom yes ? yes* no
kablonet (turksat) yes ? yes no
vodafone yes ? yes yes
gıbırnet uhh** no no no

*: only seems to do it for discord **: only seems to do it with cloudflare's dns at 1.1.1.1

circumvention

DoH (DNS-over-HTTPS)

android

  1. go to settings -> Network & Internet -> Private DNS
  2. set it to Something Other Than "Off"

or

download 1.1.1.1 from the play store and use it

ios

download 1.1.1.1 from the app store and use it. no custom DoH for you lololol


2025-03-19: total social media censorship

after Ekrem Imamoglu's arrest, almost all (popular) social media sites including but not limited to:

were blocked country-wide, to prevent the people from speaking up.

the discord incident

i have no idea if the allegations are true but it's something that happens on every platform. you can not stop child exploitation by blocking a messaging app that mostly normal people use.


circumvention (advanced)

vodafone

you could use a VPN with builtin circumvention like mullvad, alongside encrypted DNS.

for self-hosters, read below.

dm me if you are on vodafone. i have yet to come up with a general enough solution to this that an Ordinary Person can pull off. currently i do selfhosted wireguard running on my laptop at home (which is turknet), which both acts as a tunnel and DoT proxy. i use socat and DTLS to create a connectionless obfuscation channel without losing tcp congestion control and connect to it using termux on my phone (which uses vodafone for LTE) with battery savings disabled.

server:

socat openssl-dtls-server:4080,reuseaddr,fork,cert=server.pem,cafile=client.crt,verify=1 UDP:127.0.0.1:51337

client:

socat UDP-LISTEN:51337,reuseaddr,fork openssl-dtls-client:4.slonk.ing:4080,cert=client.pem,cafile=server.crt,verify=0

another option is to compile wireguard with different magic numbers. both server and client.

turknet

use encrypted DNS. see the DNS section for more info.

kablonet, turkcell and turktelekom

use a VPN with encrypted DNS. i recommend mullvad though others will work. if you have a mate on turknet that can host a wireguard server for you, you might want to consider that as well.

gıbırnet

just change your dns to 8.8.8.8 or 9.9.9.9

thanks yigib for telling me about gıbırnet.

DNS

DoT (DNS-over-TLS)

systemd-resolved

enable it in resolved.conf. i don't think you need to be told how

notes

cloudflare warp no longer works as even their exit nodes are blocked from accessing discord.