URnetwork
•••

Notes on Internet Privacy

Posts and research from the URnetwork team and community.

RSS
News / AnalysisAlbaniaCambodiaLithuaniaPanamaUnited StatesRussiaIsraelChinaUnited Kingdom

The Internet Has Two Failure Modes in 2026. They Are the Same Architecture Problem.

Tanzania lost $238 million to a five-day election blackout. Iran has spent two-thirds of the year offline. Cloudflare brought down thousands of services twice in February. Access Now just recorded the worst year for internet shutdowns on record. The shutdown story and the concentration story are not separate — and the fix is the same shape.

URnetwork editorialSan Francisco — April 6, 2026

The numbers

In March 2026, the Access Now #KeepItOn coalition released its 2025 annual report. The headline is an ugly record: 313 documented internet shutdowns across 52 countries in 2025, beating the previous records of 304 in 2024 and 289 in 2023. Every single day of the year had at least one active shutdown somewhere in the world. Seventy of them were tied to severe human-rights abuses. Asia-Pacific accounted for 195 shutdowns across 11 countries — the majority of the global total.

Seven new countries joined the "first-time offender" list in 2025: Albania, Angola, Cambodia, Lithuania, Panama, Papua New Guinea — and the United States.

Seventy-five of the 2025 shutdowns are still ongoing, carrying over into 2026. And 2026 is the biggest election year in modern internet history: more than 40 countries, with a combined population of 1.6 billion people, are holding national elections. Access Now is actively monitoring at least ten countries with shutdown histories — including Uganda, Ethiopia, Armenia, Russia, and South Sudan — under its 2026 Elections and Shutdowns Watch.

These are the floor numbers. They are the ones that can be verified. The real total is higher.

The political failure mode

Two elections in the last six months showed what "shutdown" means in practice.

Tanzania, October 29 – November 3, 2025. A full nationwide internet shutdown during the general election. It was the longest election-related blackout in Tanzania's history. Election observers' ability to monitor voting, polling station closures, and vote counting was severely limited. Independent press could not publish. Tanzania's economy is estimated to have lost $238 million as a direct result. The African Commission on Human and Peoples' Rights formally condemned the shutdown. UN experts condemned the related post-election lethal crackdown and digital blackout. X (formerly Twitter) has been suspended in Tanzania since May 21, 2025 and remained suspended through the election.

Uganda, January 13–17, 2026. The government ordered internet service providers to block public internet access ahead of the January 15 presidential election. Partial access was reinstated late on January 17. The stated justification was to "prevent misinformation." The effect was that no independent observers could publish, no real-time counts could be verified, and no transparency could be delivered. CIPESA's post-mortem documented the aftermath.

These were not "dark for a few hours" events. They were four-to-five-day windows during which the most consequential political act a country performs was held, disputed, and resolved with the internet turned off.

Shutdowns are also getting more subtle. The 2026 playbook is no longer just "cut the cable." It is gradual throttling, DNS tampering, protocol-specific blocks, and app-store coordinated removals. Russia has blocked 469 commercial VPN services as of February 2026 — a 70% increase over October 2025 — and is now throttling Telegram nationwide on the way to a full Telegram block scheduled for April 1, 2026. Since December 2025, Russia has been blocking the three most popular VPN protocols at the ISP level. New fines of up to 30,000 rubles for individuals and 700,000 for legal entities are moving through the State Duma. Human Rights Watch declared, on International Internet Freedom Protection Day, March 12, 2026: The Digital Iron Curtain Falls.

None of that is a total blackout. All of it is corrosion.

The acute case: Iran

Every story about shutdown resilience in 2026 comes back to one country.

On January 8, 2026 — day twelve of protests triggered by Iran's currency collapse and soaring inflation — Iranian authorities cut off internet service and mobile networks nationwide. An estimated 92 million citizens went dark. Three months later, Al Jazeera reports that Iranians have "spent close to two-thirds of 2026 almost in digital darkness," with only a limited, slow intranet serving basic services. Filterwatch, via the Times of Israel, reports that the regime plans to make the blackout permanent, replacing the open internet with a narrow national intranet that reaches only pre-approved sites.

The Iranian regime is not improvising. Monitoring groups have documented the regime disabling mobile antennas, cutting phone lines, deactivating SIM cards linked to activists, and deploying military-grade mobile jammers to slow or block satellite signals. Human Rights Watch, Amnesty International, and the Committee to Protect Journalists have all warned that the blackout is enabling mass human-rights violations by hiding them from view. Chatham House calls it a new stage of digital isolation. A peer-reviewed paper on arXiv documents the censorship methods in detail.

When Tehran killed the mobile network, most commercial VPNs died with it. They die because they share two structural weaknesses Iran is actively exploiting:

  1. Datacenter IPs that can be enumerated. A VPN service resolves to a finite set of IPs in a finite set of providers. You can block them by the bucket. Russia has blocked 469 of them.
  2. Distinctive protocol fingerprints. WireGuard has a fixed handshake pattern. OpenVPN's data channel starts with an opcode byte at offset 0 that is unique to OpenVPN. A deep-packet-inspection box doesn't need to decrypt anything — it just recognizes the shape of the first few bytes and kills the flow.

Two projects survive in Iran today because they avoid both weaknesses. Tor Snowflake uses ephemeral WebRTC proxies hosted in volunteer browsers — no fixed IP list to block, and WebRTC looks like any other browser video call. AmneziaWG 2.0, released March 25, 2026, adds junk packets to WireGuard specifically to destroy its DPI-visible shape. Both are serious engineering. Neither is a product a non-technical user can rely on day to day.

What Snowflake and AmneziaWG teach is this: the primitives that survive a nation-scale shutdown are transport plurality, peer diversity, and traffic that cannot be fingerprinted at the packet level.

The operational failure mode

And then, in the middle of all that, the other internet broke too.

February 16, 2026. A routing misconfiguration at one of Cloudflare's core data centers in Ashburn, Virginia introduced a BGP error that rippled outward. Amazon Web Services — which hosts roughly one-third of global cloud infrastructure — experienced intermittent connectivity degradation across its US-East-1 region. Thousands of smaller services dependent on both went down. Reports described a cascade that "took down half the internet."

February 20, 2026. Cloudflare experienced a separate outage when a subset of customers using Cloudflare's Bring Your Own IP (BYOIP) service had their routes withdrawn via BGP. Duration: 6 hours and 7 minutes. Cloudflare published its own post-mortem.

The concentration numbers are stark. Cloudflare handles approximately 20% of global web traffic. AWS commands roughly 31% of the cloud infrastructure market. The apparent diversity of the web masks a dangerously narrow backbone.

An election observer in Kampala losing connectivity because the government ordered a blackout, and a banking customer in London losing connectivity because a Cloudflare BGP table had a typo, are experiencing the same structural problem from two different directions: their access to the internet depends on a very small number of operators whose decisions — accidental or intentional — affect them immediately and completely.

What resilient actually has to mean

For most of the 2010s, "resilient internet" meant "a VPN that still works in China." That was always an incomplete answer, and the 2025–2026 numbers make it obviously wrong. You cannot buy out of this problem with a better commercial VPN, because a commercial VPN is a small number of operators routing traffic through datacenter IPs on protocols with fingerprints — the same failure class as the thing it was meant to work around.

A resilient internet infrastructure in 2026 has to satisfy four properties. Each of them is a property the current market still doesn't reliably deliver:

  1. Participant-operated edges. Every endpoint should belong to a user running the network themselves, not to an operator who can be ordered to log them, sanctioned, or added to a blocklist. Enumerability is the adversary's superpower; participation is the defense.
  2. Transport plurality. The network should speak multiple transports that are indistinguishable from ordinary web traffic, so DPI-based throttling has no target shape to match. A single-protocol network is a single-protocol target.
  3. Path diversity per connection. A single flow should not depend on a single operator, a single datacenter, or a single route. When one path degrades, the others should already be carrying load.
  4. Automatic failover without human operation. When a path drops — because the user is on a Tanzania night train, because an Iranian cell tower is dark, or because Cloudflare's BGP tables just broke — the client should move. The user should not have to.

URnetwork against the four properties

URnetwork is the internet infrastructure that was built to meet all four. It is not a VPN service. It is an overlay ISP — a peer-powered network of 30,000+ consumer devices across 60+ countries, growing weekly — whose participants operate the network in exchange for a share of the data-transfer revenue that flows through them. From the protocol page and the architecture note in our visual explainer (bringyour.com/blog/visual/visual.md):

Participant-operated edges. Every hop in the routing path is a real consumer device — a phone, a TV, a laptop, or a URnode — with a real home ISP connection. Providers earn per GiB of capacity they contribute. The network's capacity grows because its users get paid to grow it. There is no central operator that can be compelled to log a flow, because there is no central operator.

Transport plurality. The protocol ships with three transports — QUIC/TLS, TCP/TLS, and WebRTC/dTLS — all of which are also spoken by ordinary web browsers. The site describes them as "global transports designed to tunnel traffic that looks like a normal web browser." A government or ISP that wanted to fingerprint and block them at the packet level would have to block the open web along with everything else.

Path diversity per connection. Traffic is sharded across multiple providers simultaneously through a performance auction that picks the fastest, most reliable, most policy-compliant route for each connection. The default path length is three hops along a linear path, and by design each midpoint cannot tell whether it is the first or last. An adversary would have to compromise the sender, the egress, and the midpoints simultaneously to correlate a flow — and because hops are spaced across as many regions as possible, "compromise all three" is a harder request than it sounds.

Automatic failover. The sender maintains a local egress window that grows to match measured retry rates and re-weights toward paths that are actually moving traffic. When a path drops, the next-best path is already being tested. Losses get engineered around in seconds. The mechanism is called the self-healing sender algorithm and it runs without any operator intervention. There is no support ticket to file when an Iranian cell tower goes dark.

Two more properties matter for audiences that take shutdown resilience seriously:

  • Open source with reproducible builds. The client, server, and deployment tools are public. Reproducible builds mean a journalist, election observer, or security researcher with a laptop and a GitHub account can verify the running binary matches the source. The client is distributed through F-Droid for reproducible community builds and Obtainium for official GitHub releases, in addition to the major app stores. When the regulatory pressure turns toward the app stores — as it is already doing in the UK — the reproducible-build path keeps a door open.
  • Pay per GiB, no subscription profile. The business model is aligned with growing the network, not with maintaining a fixed server pool. There is no account ledger to subpoena and no identity profile to age-verify. You pay for what you use; providers earn what you pay.

One honest caveat

URnetwork is not going to survive a total nationwide blackout where every cell tower is dark. No honest infrastructure will. If the state controls the full physical stack — the towers, the satellites, the fiber cuts, the jammers — no overlay network can manufacture connectivity out of nothing.

But most real-world shutdowns are not that. They are partial. They are throttled. They are protocol-specific. They are app-store coordinated. They are BGP misconfigurations. They are the 1,400% VPN sign-up surge that followed the UK's Online Safety Act. They are Russia blocking 469 VPN services one at a time. They are the six-hour Cloudflare outage that took down services worldwide because one BGP table was wrong.

Against all of those — the partial, the throttled, the targeted, the accidental — a peer-operated, residentially-based, transport-plural, reproducibly-built overlay ISP is the right instrument. And the 2026 election calendar — 40+ countries, 1.6 billion voters, ten shutdown-history countries already on the watch list — is going to prove it.

What you can do

There is a subtext to all of this that deserves a closing sentence. Tanzania's shutdown cost $238 million. Uganda's cost days of national trade. Iran's is costing lives. None of these governments bore the cost — their economies and their citizens did. The marginal cost of a shutdown is paid by the people whose internet is cut; the political benefit is kept by the people who ordered the cut. That is the incentive misalignment that shutdown-resistant infrastructure corrects. If the shutdown doesn't work, the political benefit evaporates, and the order stops being worth giving.

The useful action here is not buying a subscription. It is running a node. Every person outside a shutdown zone who opens URnetwork and enables provider mode adds capacity that helps people inside the zone. Every URnode shipped is a whole-home endpoint that runs local AI and private browsing against a network that the state can't log. Every developer who builds against the open source client is one more person checking the binary.

The internet has two failure modes in 2026, and they are the same architecture problem. The fix is an infrastructure whose participants are the network. That infrastructure is building. You can be part of it.

References (25 sources)

References

Access Now / #KeepItOn 2025 Report

Tanzania and Uganda

Iran

Russia

Cloudflare and infrastructure concentration

Circumvention tools and research

URnetwork

  • URnetwork — Home
  • URnetwork — Protocol
  • URnetwork — Earn
  • URnetwork — URnode
  • URnetwork — About
  • URnetwork — Get the App

Further Discussion

The Commercial VPN Industry Is Architecturally Dead

The commercial VPN industry is selling a product that is structurally incapable of delivering what it promises. Russia blocked 469 VPN services in a single year because every VPN is, by definition, an enumerable list of datacenter IPs on fingerprintable protocols — any tool that can be listed can be killed. With 313 documented shutdowns across 52 countries in 2025 and Iran wiping out every major VPN overnight, the $50 billion VPN market isn't just failing its users — it is designed in a way that guarantees failure.

Decentralized Networks Won't Save You From the Physical Layer

When Iran deploys military-grade jammers and kills cell towers, no overlay network — 30,000 nodes or 30 million — can manufacture connectivity from nothing. Promising "shutdown resistance" to activists facing governments that own the towers, the fiber, and the satellites isn't aspirational — it's reckless. The honest position is that most shutdowns are partial, throttled, and protocol-specific, and *that* is where peer infrastructure works. Selling total resilience to people whose lives depend on it is the kind of overclaim that gets someone arrested trusting software that was never going to save them.

Comics

#1The Commercial VPN Industry Is Architecturally Dead
#2Decentralized Networks Won't Save You From the Physical Layer