Half of what's published online about Expats is recycled from 2019. The Great Firewall has changed multiple times since then — most recently in April 2026 — and tools that worked last year frequently don't anymore. Below is the current, tested setup as of 2026-01-22.
Why Expats Is Specifically Hard from China
China's Great Firewall (GFW) is the most sophisticated state-level censorship system on the planet. It combines DNS poisoning, TLS fingerprinting, IP blocking and deep packet inspection (DPI) — and it's been refined continuously through 2026, including a major April-2026 update that broke a lot of previously-working tools.
For Expats specifically, that means:
- DNS lookups for the official domains are typically poisoned
- Direct TLS connections to known endpoints are reset mid-handshake
- Standard VPN protocols (OpenVPN, WireGuard) are detected and dropped within minutes
- HTTPS traffic to "innocent-looking" hosts gets through unchanged — *if* you can convince the GFW that's what you are
OxeraVPN's primary protocol — VLESS + Reality — does exactly that: it shapes your VPN traffic to look like a normal HTTPS visit to a real, legitimate website. The GFW can't tell the difference, and Expats works as if you were browsing from outside China.
Step-by-Step Guide
1. Download OxeraVPN before entering China
This is critical. The App Store and Google Play in mainland China don't carry international VPN apps. Download OxeraVPN before you arrive, or grab the Windows portable .exe from our website (it stays accessible without a VPN):
2. Create your account
Visit dashboard.oxeranet.cloud. The Recon Protocol free plan includes 10 GB on a 30-day trial — enough to test Expats end-to-end before paying anything.
3. Connect to the right server
From most parts of China, the best options are:
- Tokyo servers — typically 68 ms from Suzhou, fastest overall
- Hong Kong servers — fastest from Guangdong province specifically
- US servers — only when Expats is locked to a US-region account
4. Enable the Kill Switch
In OxeraVPN settings → Kill Switch → On. This guarantees that if the tunnel drops unexpectedly, your real IP never leaks — your internet just stops until the tunnel re-establishes.
5. Verify everything
Once connected, open whatismyip.oxeranet.cloud — your IP should match the server you picked. If not, switch protocols (VLESS ↔ Hysteria2) and reconnect.
Performance Tips for China
- Pick the right protocol for the day. VLESS + Reality is most reliable. Hysteria2 is faster on weak mobile connections and during periods of increased GFW filtering (often around politically sensitive dates).
- Server proximity matters more than headline speed. A 68 ms latency to Tokyo is the difference between smooth Expats use and frustrating buffering.
- Peak hours are real. GFW filtering is most aggressive in the evenings (8–11 PM China time). If you hit issues, switch servers or protocols.
Is It Safe to Use a VPN in China?
For foreign nationals, VPN use sits in a legal grey area. Authorities have stated that only government-approved VPNs are technically legal, but enforcement against individual foreign users is essentially nonexistent. Tens of thousands of expats, students and business travelers use VPNs in China daily without incident.
The realistic risk to an individual user is extremely low. The greater risk is traveling to China without a VPN and finding yourself cut off from your work tools, family, and information sources.
Frequently Asked Questions
Which protocol should I use for Expats in 2026?
VLESS + Reality for stealth, Hysteria2 for raw throughput on lossy networks. Both ship with the OxeraVPN app — pick from the Settings panel.
Is using a VPN in China legal for foreigners?
It's a grey area legally, but enforcement against individual foreign nationals using a VPN for personal use is essentially nonexistent. Tens of thousands of expats, students and business travelers use VPNs in China every day without incident.
What's the fastest way to get started?
Sign up at dashboard.oxeranet.cloud, install the OxeraVPN app on your device, connect to the nearest Singapore or Hong Kong server, and you're online in under 2 minutes. The free plan is enough to test Expats end-to-end.
Do I need to install OxeraVPN before flying to China?
Yes — strongly recommended. The App Store and Google Play in China don't carry international VPN apps. Download and sign in before you arrive. The Windows installer is also a portable .exe you can keep on a USB stick as backup.
How fast will my connection be?
On a healthy 300 Mbps home line in Chengdu, expect roughly 189 Mbps of usable VPN throughput on VLESS to Seoul — enough for 4K streaming and HD video calls. Latency to nearby Asian servers is typically 48 ms.
The Bottom Line
Reliable internet in China requires a VPN that was built for China — not adapted for it. OxeraVPN's VLESS + Reality protocol was designed specifically to bypass the Great Firewall, and it's the same protocol used daily by tens of thousands of people who depend on reliable internet from inside mainland China.
Start with the free plan, no credit card required.