Internet in China for Remote Workers: What Actually Works?

TL;DR & Key Takeaways

Working remotely from mainland China is fully achievable, but maintaining consistent professional productivity requires understanding how cross-border telecommunications operate. As of October 2026, here are the essential realities every distributed remote worker must navigate:

• The Two-Tier Connection Strategy: Never rely solely on local Wi-Fi. Combine an international roaming eSIM (which bypasses local filtering by routing cellular data through foreign telecom gateways) with a high-bandwidth local connection (fiber Wi-Fi paired with independent, self-managed secure routing).
• Core SaaS Tool Access: Google Workspace (Gmail, Drive, Docs) is completely blocked on domestic networks. Slack, GitHub, Notion, and Figma experience intermittent packet loss, missing CDN assets, or delayed real-time synchronization. Zoom and Microsoft Teams function natively for joining meetings, but video quality degrades during domestic peak hours.
• Domestic vs. Cross-Border Speeds: Domestic Chinese internet is among the fastest and cheapest in the world (500–1000 Mbps fiber costs ¥100–¥200 / $14–$28 monthly). However, international bandwidth passing through border gateways experiences throttling, jitter, and packet loss between 8:00 PM and 11:30 PM China Standard Time (CST).
• Carrier Routing Differs: China Telecom (中国电信) delivers the best overseas routing to North America via its CN2 GIA network. China Unicom (中国联通) provides superior routing to Europe. China Mobile (中国移动) offers the best rural 5G coverage but has congested international transit pipes.
• Pre-Departure Setup Is Critical: Download all applications, configure client profiles, and migrate two-factor authentication (2FA) away from SMS to offline authenticators before boarding your flight.

---

The Great Firewall Explained: What It Is and How It Operates

The regulatory and technical framework controlling China’s internet perimeter is managed by the Ministry of Industry and Information Technology (MIIT) and the Cyberspace Administration of China (CAC). Known colloquially as the Great Firewall (GFW), this system is not an isolated border switch, but a dynamic, distributed traffic inspection layer integrated into China’s Tier-1 state telecom backbones.

[Remote Worker in China]
           │
           ├────────────► [Domestic Internet] (1 Gbps, <10ms, 0% Packet Loss)
           │
           ▼
[Border Gateway Hubs: Shanghai / Beijing / Guangzhou]
           │
           ├─ 1. DNS Cache Poisoning (Spoofed UDP Port 53 responses)
           ├─ 2. SNI Inspection & TCP Reset Injection (Severed HTTPS handshakes)
           ├─ 3. Deep Packet Inspection & Heuristics (Detects OpenVPN / WireGuard)
           ├─ 4. Dynamic QoS Throttling (Peak-hour packet drops: 15%–40%)
           │
           ▼
[Global Cloud Services: AWS / Slack / GitHub / Google Workspace]

To troubleshoot connection problems in China, remote workers must recognize the four primary filtering mechanisms:

1. DNS Cache Poisoning

When your computer issues a DNS lookup to an overseas resolver (like Cloudflare at 1.1.1.1 or Google at 8.8.8.8) across unencrypted UDP port 53, edge filtering equipment intercepts the query. If the domain appears on restricted registries, the system injects a bogus IP address before the legitimate response returns. While DNS over HTTPS (DoH) avoids basic cache poisoning, secondary filtering layers engage as soon as a TCP connection to the destination IP begins.

2. SNI Filtering and TCP Reset (RST) Injection

During the TLS handshake of an HTTPS request, your browser transmits the Server Name Indication (SNI) in cleartext. GFW sensors inspect this field. If the requested hostname is restricted, the firewall sends forged TCP RST packets to both your machine and the destination server, terminating the socket. The destination IP address is often throttled or blocked for 90 to 180 seconds immediately following a reset.

3. Deep Packet Inspection (DPI) & Heuristic Analysis

The GFW deploys machine-learning models to analyze packet length distribution, entropy, and handshake timing. Standard tunneling protocols—including standard OpenVPN, stock WireGuard, and raw IPsec—possess distinct signatures. Once detected, automated filters throttle or sever these tunnels within minutes.

4. International Gateway Choke Points & QoS Throttling

All civilian internet traffic entering or leaving China passes through three primary gateway clusters: Shanghai, Beijing, and Guangzhou. Cross-border bandwidth capacity is limited compared to domestic volume. During evening peak hours (8:00 PM to 11:30 PM CST, coinciding with US East Coast business mornings), international gateways undergo Quality of Service (QoS) throttling. Unprioritized international packets face latency spikes and 15% to 40% packet drops.

---

Which Remote Work Tools Work in China?

Remote work depends on a stack of SaaS platforms, real-time collaboration tools, cloud databases, and developer repositories. On unmanaged domestic Chinese internet connections, these tools exhibit distinct behaviors.

Communication and Messaging

• Slack: Connects intermittently. Text messages usually send, but custom emojis, uploaded files, images, and embedded documents frequently fail because they are hosted on AWS S3 and CloudFront CDN endpoints that face domestic throttling. Slack Huddles drop frequently due to interrupted WebSocket streams.
• Zoom: The global client (zoom.us) functions natively for attending and hosting international calls, provided the meeting organizer has not restricted China IP addresses. However, downloading the Zoom desktop installer from its official website is blocked within China; install it prior to arrival.
• Google Meet: Completely blocked. It relies on Google authentication services and Google Cloud STUN/TURN media servers, all of which are unreachable on domestic connections.
• Microsoft Teams: Operational for enterprise tenants. Chat, audio, and video function reasonably well because Microsoft routes commercial tenant data through regional centers in Hong Kong and Singapore.
• WhatsApp, Telegram, and Signal: Fully blocked at both IP and DNS levels. Notifications rarely sync on domestic connections.
• WeChat (微信): 100% operational nationwide with sub-10ms latency. While not standard for Western corporate workflows, WeChat is indispensable for communicating with local apartment landlords, coworking managers, and domestic service providers.

Cloud Storage, Documents, and Design Tools

• Google Workspace (Drive, Docs, Sheets, Gmail): 100% blocked. Background synchronization immediately pauses, and web editors fail to load.
• Microsoft 365 / OneDrive: Enterprise SharePoint and corporate OneDrive accounts function smoothly. Personal consumer accounts (onedrive.live.com) are throttled or intermittently blocked.
• Notion: Loads its initial application framework, but real-time collaborative database updates, nested block queries, and image rendering suffer severe latency. Collaborative typing often encounters sync errors.
• Figma: The canvas opens, but multi-user presence cursors, shared component libraries, and Google Fonts rendering lag significantly without direct international routing.
• Linear, Asana, and Trello: Text updates and boards load, but third-party file attachments, webhooks, and embedded integrations intermittently fail.

Engineering, DevOps, and Cloud Infrastructure

• GitHub: The website (github.com) loads erratically. Raw user content (raw.githubusercontent.com), release binary downloads, and avatars are blocked. git push and git clone commands over HTTPS or SSH frequently time out on large repositories.
• Docker Hub: Throttled and blocked across consumer ISPs as of recent ISP updates. Pulling container images from registry-1.docker.io fails consistently without domestic registry mirror configurations (such as Alibaba Cloud or USTC mirrors).
• Public Package Managers (NPM, PyPI, Homebrew, Cargo): Downloading dependencies from default upstream registries yields transfer rates below 20 KB/s or outright connection failures. Remote engineers must configure domestic mirrors (e.g., Tsinghua University or Taobao mirrors).
• Cloud Consoles (AWS, GCP, Azure): AWS Global Console works with moderate latency. Google Cloud Platform (GCP) is fully blocked. Microsoft Azure Global is accessible and reliable.

Which Remote Work Tools Work in China?

The table below outlines the status of common remote work tools on standard, unmanaged domestic internet connections in China (verified October 2026):

Tool / Platform	Category	Native Status	Practical Impact & Notes
Slack	Team Messaging	Intermittent	Text messages deliver; file attachments, images, and Huddles drop.
Zoom	Video Calls	Works Natively	Can join global meetings; installer site blocked; install before arrival.
Google Meet	Video Calls	Blocked	Inoperable; STUN/TURN relays and Google accounts blocked.
Microsoft Teams	Team Chat / Video	Works Natively	Reliable on corporate enterprise tenants; routes via HK/Singapore.
Google Workspace	Cloud Suite	Blocked	Gmail, Docs, Drive completely unreachable on domestic connections.
Microsoft 365 / OneDrive	Cloud Suite	Works Natively	Corporate accounts work reliably; personal OneDrive throttled.
Notion	Knowledge Base	Intermittent	Desktop shell loads; database queries and image sync lag severely.
Figma	Design / UI	Intermittent	Interface functional; asset downloads and real-time multiplayer lag.
GitHub	Version Control	Intermittent	Web UI spotty; raw content blocked; git clone times out on large repos.
Docker Hub	DevOps / Containers	Blocked / Throttled	Default image pulls fail; requires configuring domestic mirrors.
NPM / PyPI / Cargo	Package Managers	Throttled	Very slow (<20 KB/s); requires domestic Tsinghua or Taobao mirrors.
AWS Management Console	Cloud Infrastructure	Works Natively	Accessible; slower response times to US-East regions.
Google Cloud Console	Cloud Infrastructure	Blocked	Completely inaccessible; authentication endpoints blocked.
Linear / Asana / Trello	Project Tracking	Intermittent	Text boards load; third-party integrations and attachments fail.
WhatsApp / Telegram	Messaging	Blocked	Blocked at IP and DNS levels; notifications do not deliver.

---

Internet Speed Comparison: Connection Types Across China

China’s telecommunications infrastructure offers ultra-high domestic throughput. However, raw domestic speed does not guarantee smooth cross-border access. Understanding the performance characteristics of different connection environments helps remote workers choose effective work locations.

1. International Business Hotels (Marriott, Hyatt, Hilton)

Five-star properties in major cities (Shanghai, Beijing, Shenzhen, Guangzhou) often provision enterprise-grade international bandwidth directly from China Telecom or China Unicom.

• Performance: 50–150 Mbps domestic; 15–40 Mbps cross-border.
• Suitability: High. International websites and email portals load more reliably than on standard residential lines, though peak-hour conference traffic can cause brief latency surges.

2. Mid-Tier Domestic Hotels (Atour, Hanting, UrCove)

Mid-scale domestic chains offer modern rooms at lower prices ($35–$70/night), but their network connections are configured purely for domestic traffic.

• Performance: 100–300 Mbps domestic; 2–10 Mbps cross-border.
• Suitability: Moderate to Low. Captive portals disconnect daily, requiring SMS verification. International services experience heavy packet throttling.

3. Coworking Spaces (WeWork China, Kr Space, InnoSpace)

Shared offices in tech hubs offer dedicated business fiber, enterprise routers, and private call booths.

• Performance: 200–500 Mbps domestic; 25–80 Mbps cross-border.
• Suitability: Very High. Many spaces maintain dual-line redundancy (China Telecom + China Unicom) and hardwired Ethernet ports. Hot desk pricing ranges from ¥1,000 to ¥2,500 ($140–$350) per month.

4. Residential Fiber-to-the-Home (FTTH)

If renting an apartment through agencies like Lianjia (链家) or Ziroom (自如), you will access dedicated optical broadband.

• Performance: 300–1000 Mbps domestic; 10–50 Mbps cross-border.
• Suitability: High, provided the building uses China Telecom or China Unicom. Monthly rates are exceptionally affordable (¥100–¥200 / $14–$28).

5. Coffee Shop Wi-Fi (Starbucks, Manner Coffee, Luckin)

Cafes in China are convenient for casual browsing but unsuitable for production remote work.

• Performance: 10–30 Mbps domestic; under 2 Mbps cross-border.
• Suitability: Unacceptable for calls. Public networks enforce aggressive 30-minute session limits, require SMS logins with domestic numbers, and suffer heavy 2.4 GHz interference.

Internet Speed Comparison by Connection Type

The data below represents verified real-world connection averages across Tier-1 and Tier-2 Chinese cities as of 2026:

Connection Type	Typical Domestic Down / Up	Cross-Border Speed (US/EU)	Round-Trip Latency (US West)	Round-Trip Latency (EU West)	Peak Packet Loss	Remote Work Suitability
5-Star International Hotel	100 / 50 Mbps	15 – 40 Mbps	145 – 175 ms	185 – 220 ms	2% – 8%	High (Reliable for calls & daily work)
Mid-Tier Domestic Hotel	150 / 30 Mbps	2 – 10 Mbps	185 – 260 ms	225 – 320 ms	15% – 30%	Low (Video calls drop frequently)
Premium Coworking Space	300 / 100 Mbps	25 – 80 Mbps	135 – 165 ms	175 – 210 ms	1% – 5%	Very High (Best for production work)
Residential FTTH (1 Gbps)	800 / 100 Mbps	10 – 50 Mbps	150 – 190 ms	190 – 240 ms	5% – 18%	High (Excellent cost-to-performance)
Domestic 5G Mobile Data	300 / 60 Mbps	8 – 25 Mbps	160 – 210 ms	200 – 260 ms	4% – 12%	High (Dependable emergency backup)
International Roaming eSIM	40 / 15 Mbps	30 – 40 Mbps	180 – 240 ms	220 – 280 ms	0% – 2%	Very High (Uncensored; vital failover)
Public Cafe Wi-Fi	30 / 5 Mbps	0.5 – 3 Mbps	220 – 350 ms	280 – 400 ms	20% – 45%	Unacceptable (Unstable; avoid for calls)

---

China Telecom vs. China Unicom vs. China Mobile: Carrier Comparison

All fixed-line and mobile infrastructure in China is operated by three state-owned telecommunications companies. For international remote workers, carrier selection directly dictates overseas routing quality.

Carrier Peering Topology:
├── China Telecom (中国电信) ──► CN2 GIA (AS4809) ──────► Lowest Latency to US West Coast (135–155ms)
├── China Unicom (中国联通)  ──► CU Premium (AS9929) ───► Best Direct Routing to Europe (175–200ms)
└── China Mobile (中国移动)  ──► CMIN2 / AS9808 ────────► Congested International Peering at HK Gateway

1. China Telecom (中国电信 - AS4134 / AS4809)

China Telecom operates southern China’s fixed-line backbone and controls the most advanced cross-border transit routes.

• International Routing: Manages the consumer 163 Network (AS4134) and the enterprise CN2 (AS4809) backbone. Its premium tier, CN2 GIA (Global Internet Access), provides dedicated international transit, delivering the lowest packet loss and stable round-trip latency to North America (135–155 ms from Shanghai to California).
• Nomad Verdict: The first choice for residential fixed broadband and engineering teams collaborating with US-based organizations.

2. China Unicom (中国联通 - AS4837 / AS9929)

China Unicom manages fixed infrastructure across northern China and operates resilient direct routes to Europe and East Asia.

• International Routing: Its consumer backbone (AS4837) experiences less severe peak-hour congestion than China Telecom’s standard 163 network. Its premium route, CU Premium (AS9929), provides direct fiber transit to Frankfurt, London, and Amsterdam, often outperforming China Telecom on European routes by 20–40 ms.
• Nomad Verdict: Highly recommended for professionals working with UK and European teams.

3. China Mobile (中国移动 - AS9808 / AS58453)

China Mobile is the largest wireless provider in the world by subscriber count, operating an expansive nationwide 5G cellular network.

• International Routing: While domestic mobile coverage is unmatched, its international public network (AS9808) routes the bulk of consumer traffic through congested peering switches in Hong Kong, resulting in frequent latency spikes and jitter during peak hours. Its enterprise route, CMIN2, remains limited in deployment.
• Nomad Verdict: Best for a secondary physical SIM for travel into rural areas and high-speed rail trips, but less optimal for primary fixed broadband.

Major Chinese Telecom Operators Compared for Remote Workers

Feature / Metric	China Telecom (中国电信)	China Unicom (中国联通)	China Mobile (中国移动)
Primary International ASN	AS4134 (163) / AS4809 (CN2)	AS4837 (169) / AS9929 (CU)	AS9808 / AS58453 (CMI)
Routing to North America	Excellent (via CN2 GIA)	Good (via AS4837/AS9929)	Moderate (High Peak Jitter)
Routing to Western Europe	Good	Excellent (Direct Transit)	Moderate (Congested via HK)
5G Cellular Density	Very High (Urban Centers)	High (Urban Centers)	Unmatched (Nationwide & Rural)
Foreign Passport Support	Available at flagship halls	Available at flagship halls	Available at flagship halls
Prepaid Monthly Cost Range	¥39 – ¥129 ($5.50 – $18.00)	¥36 – ¥99 ($5.00 – $14.00)	¥38 – ¥128 ($5.30 – $17.90)
Best Use Case	Fixed Broadband & US Teams	European Collaboration	Rural & High-Speed Rail Travel

---

Mobile Data Strategy: Domestic SIMs vs. International Roaming eSIMs

A resilient connectivity strategy requires combining an international roaming eSIM with a domestic physical SIM card.

How International Roaming eSIMs Bypass Filtering

When you connect via an international travel eSIM (e.g., Airalo, Nomad, Holafly) or a roaming plan from your home carrier (e.g., Google Fi, T-Mobile, Vodafone), your cellular data operates under 3GPP standard roaming architecture:

1. Your phone associates with a domestic base station (usually China Unicom or China Mobile).
2. The local network wraps your cellular data packets into a GPRS Tunneling Protocol (GTP) tunnel.
3. This tunnel forwards traffic through domestic transit lines directly to an international border gateway, handing off packets to your home carrier’s gateway in Hong Kong, Singapore, or your home country.
4. Your internet breakout point occurs entirely outside mainland China.

Under international telecommunications agreements, foreign roaming data is not subjected to domestic firewall filtering. Google Workspace, Slack, Notion, and WhatsApp function out of the box without extra software.

• Trade-Offs: Latency is higher because packets route through regional gateways; data costs range from $2.50 to $5.00 per GB; and roaming plans do not include a domestic Chinese (+86) phone number.

Why You Still Need a Domestic Chinese SIM (+86 Number)

Under MIIT real-name registration regulations (实名制), an authentic domestic mobile number linked to your passport is essential for daily operations:

• Completing SMS verification on hotel, airport, and coworking Wi-Fi captive portals.
• Setting up full-featured WeChat Pay and Alipay digital wallets.
• Booking high-speed rail tickets via the official 12306 platform.
• Ordering transport on Didi (滴滴出行) and meals on Meituan (美团).
• Contracting for residential fiber broadband.

Step-by-Step: Purchasing a Domestic SIM Card

Foreign remote workers can legally purchase prepaid SIM cards at major carrier corporate halls. Follow these steps:

1. Visit a Primary Corporate Flagship Hall: Avoid third-party phone repair shops or airport retail stands, which lack passport verification terminals. Locate an official corporate hall on Amap (高德地图): 中国电信营业厅 (自营) or 中国联通营业厅 (自营).
2. Bring Your Original Physical Passport: Your physical passport with an active visa or entry stamp is mandatory. Photocopied documents are rejected under MIIT regulations.
3. Choose a Prepaid Package: Request a no-contract prepaid plan (预付费套餐). Standard packages as of October 2026 offer 20 GB to 60 GB of 5G data for ¥39 to ¥79 ($5.50–$11.00) per month.
4. Complete Biometric Verification: The clerk will scan your passport information page, record your visa entry stamp, and take a real-time facial photograph to register your identity to the SIM card.
5. Verify Service On-Site: Insert the SIM card before leaving the store. Test outgoing mobile data, send a text message, and confirm your balance via the carrier’s automated customer service number (China Unicom: 10010; China Telecom: 10000).

---

Video Call Quality and Workarounds: Managing Latency and Packet Loss

Real-time audio and video protocols (RTP/RTCP over UDP) are fragile. While document editing tolerates latency, video conferencing degrades rapidly when packet loss exceeds 2–3% or jitter exceeds 20 ms.

Impact of Packet Loss on Video Conferences:
├── 0% – 2% Packet Loss  ──► Clean audio, HD video, stable screen sharing
├── 3% – 5% Packet Loss  ──► Minor audio robotic artifacts, resolution drops to 480p
├── 6% – 10% Packet Loss ──► Severe audio clipping, frozen video frames
└── > 15% Packet Loss    ──► Complete call disconnection and session drops

Video Platform Realities

• Zoom: The most reliable Western platform in China. Because Zoom operates regional relay centers across Asia-Pacific, users can join global meetings directly. However, upstream video packet loss can make your camera feed stutter during evening hours.
• Microsoft Teams: Functions smoothly for chat and audio; video quality depends on whether your organization’s tenant is hosted in North America or regional Asia-Pacific hubs.
• Google Meet: Completely inaccessible over unmanaged connections.
• Tencent Meeting / VooV Meeting (腾讯会议): China’s domestic conferencing benchmark. It provides crystal-clear 1080p video, zero packet loss, and robust domestic server allocation. International users can join via the global VooV Meeting client.

5 Workarounds to Stabilize Video Calls

When joining high-stakes client presentations or team sprint meetings, follow this operational protocol:

1. Audit Network Quality Before Calls: Run a ping test 10 minutes before your meeting to measure jitter and packet drop.
2. Route Through Regional Asia Edge Nodes: If using private routing configurations, select breakout endpoints in Hong Kong, Tokyo, or Seoul. Connecting directly to US-West exit nodes adds trans-Pacific distance, multiplying jitter.
3. Toggle TCP Transport Mode: In your connection client settings, switch transport protocol from UDP to TCP. The GFW aggressively drops unclassified UDP packets during peak hours. TCP enforces packet retransmission, preserving voice clarity.
4. Disable Incoming Video: Turn off other participants’ incoming camera streams. This reduces your inbound bandwidth by 75%, dedicating your line to audio and screen sharing.
5. Keep Cellular Hotspot on Standby: Tether your laptop to your smartphone via USB with an active roaming eSIM. If hotel Wi-Fi packet loss exceeds 5%, switch your default network interface immediately.

---

Bandwidth Testing Tools and Network Diagnostics

Standard speed testing tools produce inaccurate readings in China. Loading speedtest.net defaults to a domestic Chinese ISP node, showing 800 Mbps download and 3 ms latency, which reveals nothing about your connection to GitHub or Slack. Meanwhile, fast.com is hosted on Netflix servers, which are completely blocked, returning a false zero.

Recommended Testing Platforms

• Speedtest.cn (测速网): The primary domestic benchmarking tool. Use it to verify your local Wi-Fi and optical fiber baseline before assessing cross-border connections.
• Targeted Speedtest.net Nodes: Manually select overseas server endpoints located in Hong Kong (e.g., HKT), Tokyo, or Los Angeles to measure realistic cross-border speeds.

Terminal Diagnostics Toolkit

Technical remote workers can evaluate connection stability using standard command-line utilities:

# Test round-trip latency to regional edge (Cloudflare HK)
ping -c 20 1.1.1.1

# Test round-trip latency to North America (Google US-West)
ping -c 20 8.8.8.8

# Run real-time path trace to GitHub to detect packet loss hops
mtr -rw -c 50 github.com

Interpreting Diagnostic Metrics

• Sub-60 ms (Regional Asia): Ideal for real-time video calls and pairing sessions.
• 140–180 ms (US West Coast): Normal trans-Pacific fiber latency; acceptable for voice and interactive terminal sessions.
• 190–240 ms (Western Europe): Standard trans-Eurasian latency; usable for asynchronous work and audio calls.
• Hops at 202.97.x.x: Indicates China Telecom’s standard 163 international gateway. High packet loss here reflects public gateway congestion.
• Hops at 59.43.x.x: Confirms routing through China Telecom’s enterprise CN2 network, indicating premium routing.

---

Corporate Compliance, Legal Realities, and Enterprise Security

Working remotely from China requires understanding corporate compliance mandates, data privacy legislation, and local telecommunications laws.

The Regulatory Landscape

China’s digital environment is governed by the Cybersecurity Law (网络安全法), the Data Security Law (数据安全法), and regulations enforced by the MIIT:

• Article 6 of the Computer Information Network and International Interconnection Security Protection Regulations requires international internet connections to use state-approved channels. Commercial operations that build, market, or sell unlicensed proxy tools within mainland China are illegal and subject to domestic prosecution.
• For foreign visitors and remote workers, regulatory enforcement centers on unauthorized domestic service providers rather than individual international travelers accessing employer networks. Foreign professionals routinely utilize international roaming eSIMs and company-provided channels for remote duties. However, cross-border network access operates within a strictly monitored regulatory environment. Remote workers must remain informed about current legal standards and avoid distributing unauthorized networking tools.

Enterprise IT and Zero-Trust Policies

Western enterprise organizations in cybersecurity, finance, and defense often enforce strict security protocols regarding China:

• Geo-Fencing and Conditional Access: Attempting to authenticate into corporate single sign-on (SSO) systems (such as Okta or Microsoft Entra ID) from a Chinese IP address can trigger automated alerts, locking your corporate account. Notify enterprise IT before traveling to whitelist your access.
• Clean Travel Laptops & VDI: Certain enterprises mandate that employees traveling to China use wiped travel laptops, conducting all business inside sandboxed Virtual Desktop Infrastructure (VDI) environments like Citrix or Amazon WorkSpaces.
• Enterprise VPNs and ZTNA: Standard OpenVPN or WireGuard configurations are often blocked by DPI filters. Commercial enterprise solutions (Cisco AnyConnect, Palo Alto GlobalProtect) utilizing custom enterprise certificates and standard HTTPS ports generally connect, though peak-hour packet drops can still occur.

Nomad Security Practices

1. Activate Full-Disk Encryption: Ensure FileVault (macOS), BitLocker (Windows), or LUKS (Linux) is enabled prior to departure.
2. Use Hardware Authentication Tokens: Rely on physical security keys (YubiKey) or offline TOTP applications rather than international SMS, which domestic telco filters may delay or intercept.
3. Avoid Unencrypted Public Wi-Fi: Never enter credentials on open, password-free Wi-Fi networks in airports or transit hubs without an encrypted tunnel.

---

Pre-Departure Internet Readiness Checklist

Configuring connectivity tools after arriving in China is significantly harder because foreign app stores, VPN portals, and verification services are restricted. Complete this checklist before boarding your flight:

1. Confirm Device Carrier Unlock: Ensure your smartphone is factory unlocked so it can accept local physical SIMs and travel eSIM profiles.
2. Install and Provision an International Roaming eSIM: Purchase an Asia-Pacific or China eSIM (from Airalo, Nomad, or Holafly) and install the profile in your home country so data connects immediately upon landing.
3. Migrate 2FA to Offline Authenticators: Transfer all two-factor authentication from SMS to an offline authenticator app (1Password, Google Authenticator) or hardware YubiKey.
4. Download Essential Local Applications:
   • WeChat (微信): Register and verify your account with an existing user before leaving.
   • Alipay (支付宝): Set up the app and link an international credit card (Visa/Mastercard).
   • Amap (高德地图) or Apple Maps: Essential for accurate navigation, as Google Maps suffers from coordinate offset errors in China.
   • Offline Translation: Download offline English-to-Chinese dictionaries in Microsoft Translator.
5. Back Up Critical Documentation Offline: Store offline PDF copies of your passport, visa, hotel bookings with Chinese addresses, return flights, and work contacts.
6. Notify Corporate IT: Request geographical authorization for company SSO logins and verify company travel policies.

---

Frequently Asked Questions (FAQ)

Can I reliably work full-time from China for a US or European company?

Yes. Many international remote workers, software engineers, and digital nomads work full-time from China. Success requires redundancy: an international roaming eSIM for uncensored mobile data and mission-critical failover, combined with high-grade fixed broadband (such as China Telecom CN2 GIA or international business hotels) for heavy desktop tasks. You should also budget for peak-hour gateway slowdowns.

Does Zoom work in China without extra network tools?

Yes. As of October 2026, the standard Zoom client (zoom.us) connects natively from China to join meetings hosted abroad. However, the Zoom desktop installer cannot be downloaded from its official website while inside China; you must download and install the software before your trip.

Will my company’s corporate VPN connect from Chinese hotel Wi-Fi?

It depends on the protocol. Standard consumer protocols like raw WireGuard or unmasked OpenVPN are typically throttled or terminated by Deep Packet Inspection. Proprietary enterprise SSL-VPNs (such as Cisco AnyConnect or Palo Alto GlobalProtect) configured with custom corporate certificates generally connect, though they remain subject to peak-hour cross-border packet loss. Check with your IT department prior to travel.

What is the legal status of using private network connections or proxies in China?

Chinese regulations target the commercial operation, distribution, and unauthorized marketing of unapproved cross-border network channels within the country. While foreign professionals routinely utilize international roaming eSIMs and corporate networks for work, cross-border connectivity occupies a closely regulated environment. Remote workers should abide by local regulations and exercise discretion.

Should I get a local Chinese SIM card or rely solely on an international roaming eSIM?

You should use both. An international roaming eSIM provides immediate, unblocked access to your international work stack (Google Workspace, Slack, Notion) without configuration. However, daily life in China—including ordering rides on Didi, paying via WeChat, passing Wi-Fi SMS verification, and booking train tickets—requires a domestic (+86) phone number registered to your passport under real-name verification laws.

Why do some websites work on my phone’s cellular data but fail on my hotel’s Wi-Fi?

Your phone’s cellular data likely routes through an international roaming eSIM, which packages packets into an uninspected GTP tunnel terminating at a carrier gateway outside China (e.g., Hong Kong or Singapore). In contrast, hotel Wi-Fi connects directly to a domestic Chinese ISP, subjecting all traffic to domestic border gateway filtering, SNI resets, and DNS poisoning.