Snowflake and Tor Bridges: Bypass Censorship and Surveillance

In countries with heavy internet censorship — China, Iran, Russia, Belarus — the standard Tor connection is blocked at the network level. Tor bridges and pluggable transports disguise Tor traffic to look like ordinary HTTPS, video streaming, or other innocuous protocols. This guide covers the main tools and how to use them.

Why Regular Tor Gets Blocked

Standard Tor connects to public relay nodes whose IP addresses are published in the Tor directory. Censors can simply download this list and block all those IPs. Pluggable transports solve this by:

1. Using unpublished bridge relays (not in the public directory)
2. Disguising Tor traffic to look like something else

Pluggable Transport Types

obfs4

The most widely used pluggable transport. obfs4 makes Tor traffic look like random bytes — no recognizable TLS handshake, no identifiable headers. It’s highly resistant to deep packet inspection (DPI).

Snowflake

Snowflake routes Tor traffic through volunteer browser-based proxies using WebRTC (the same technology as browser video calls). Traffic looks like WebRTC calls, which are nearly impossible to block without disrupting legitimate video conferencing tools.

Best choice for users in China and Iran where obfs4 bridges are heavily blocked.

meek-azure / meek-amazon

Domain fronting technique — traffic appears to go to Microsoft Azure or Amazon AWS (which can’t be blocked without massive economic impact). Used as a last resort due to high latency.

WebTunnel

Newest transport — hides Tor traffic inside HTTPS connections to ordinary websites using a reverse proxy. Looks indistinguishable from regular HTTPS to a passive observer.

Setup: Tor Browser with Snowflake

The easiest approach for most users:

1. Download Tor Browser from torproject.org
2. On first launch, click Configure Connection
3. Click Use a bridge → Select Snowflake
4. Click Connect

Snowflake works without requesting bridge addresses from Tor — it connects to a Snowflake proxy automatically via a central broker.

Setup: Tor Browser with obfs4

If Snowflake doesn’t work:

1. In Tor Browser → Configure Connection → Use a bridge
2. Select Request a bridge from torproject.org (obfs4)
3. Solve the CAPTCHA to receive bridge addresses
4. Enter the bridge addresses in the “Provide a bridge I know” field

Or get bridges from bridges.torproject.org via email (send a blank email to [email protected] from a Gmail or Riseup address).

Orbot: Tor for Android

Orbot (Guardian Project) brings Tor + pluggable transports to Android:

1. Install from F-Droid or Google Play
2. Open Orbot → Settings → Bridges → enable
3. Select Snowflake from the bridge type dropdown
4. Enable VPN mode to route all device traffic through Tor

With VPN mode, all apps on your Android phone use Tor — not just Tor Browser.

Becoming a Snowflake Proxy

Help censored users by running a Snowflake proxy yourself. It uses a tiny amount of bandwidth and is safe to run (you’re a relay, not an exit node).

Browser extension (easiest):

• Install the Snowflake extension for Chrome or Firefox from the Tor Project
• Toggle it on — you’re now a proxy for censored users

Standalone proxy (for always-on use):

# Install Go, then:
go install gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/v2/proxy@latest

# Run
~/go/bin/proxy

Setting Up Bridges Manually in Tor

If you have bridge addresses (obfs4 or WebTunnel):

1. Tor Browser → hamburger menu → Settings → Connection
2. Use a bridge → Add a Bridge Manually
3. Enter each bridge line, e.g.:

obfs4 185.xxx.xxx.xxx:443 FINGERPRINT cert=CERT iat-mode=0

Tor + VPN Considerations

Two common configurations:

Tor over VPN (VPN then Tor): Connect VPN first, then use Tor Browser. Your ISP sees VPN traffic (not Tor). The VPN sees you’re using Tor but not what you’re doing.

VPN over Tor (Tor then VPN): Route VPN through Tor — complex setup, rarely necessary.

For most censored users, Tor over VPN is the right choice: connect to a VPN (preferably one that supports Shadowsocks or obfsproxy), then launch Tor Browser with Snowflake.

Performance Expectations

Transport	Speed	Reliability	Detection Resistance
Direct Tor	Fast	High (if not censored)	Low
obfs4	Moderate	Good	High
Snowflake	Slower	Variable	Very High
meek-azure	Slow	High	Very High
WebTunnel	Moderate	Good	Very High

Expect Snowflake to be 2–5× slower than regular Tor. For browsing and messaging, this is acceptable. For video streaming or large downloads, use obfs4 if available.