What to Do When the VPN Is Blocked Too

A restrictive network rarely blocks the website and stops there. It blocks the well-known ways around it, and a VPN is the most well-known of all: published server ranges, a recognisable handshake, and thousands of users on the same addresses. When the app spins forever, the network has identified the protocol, not the site.

The quick answer

Stop retrying the VPN. Move to a proxy on a standard web port (443 or 8080), because there is no tunnel to detect — it looks like an ordinary HTTPS connection to a server. If that also fails, the network is inspecting content rather than protocol, and it may not be beatable from that device.

How to recognise protocol filtering

• The tunnel connects but no traffic passes: the handshake is allowed and the payload is dropped.
• It fails at the same point, every time, on every server you try.
• Different protocols behave differently — WireGuard dead, OpenVPN on TCP 443 alive — which points at ports and protocols being matched.
• Mobile data works where the network does not, which isolates the block to that network.

Why a proxy is a genuinely different test

An HTTP or SOCKS5 proxy carrying one dedicated address on port 443 looks, at a glance, like ordinary browsing to a website. There is no tunnel to negotiate, no client to fingerprint and no published range of addresses to enumerate.

That is not a guarantee — a network inspecting content can still see a destination it dislikes. But in the specific case of "VPN identified and dropped", a proxy is a different experiment rather than a repeat of the one that already failed.

When the honest answer is no

If the network resolves only what it approves, blocks by address and inspects content, then on that device there may be no working route. A different device — a phone on mobile data — is often the honest fix, and it costs ten seconds to check.

Where this stops, and what solves it

Nothing on your side outruns a network that can inspect everything you send. Anything claiming otherwise on a school or corporate network is selling a hope.

For networks that block protocols rather than content, a private address on a standard port is the lightweight alternative that usually still works — $10 for a 30-day term rather than a subscription bought for one afternoon.

Common questions

Why does my VPN work on mobile data but not on Wi-Fi?

The Wi-Fi network is filtering VPN protocols. Mobile carriers generally do not.

Is a proxy as private as a VPN?

No. A proxy changes the address the site sees but adds no encryption beyond the HTTPS the site already uses. For reaching one site that is usually enough; for covering everything, it is not.

Can I run a VPN through a proxy?

In practice yes, though it is fiddly and slower. Most people are better served by pointing one browser at a proxy than by tunnelling everything twice.