The freedom under the freedoms
A country that celebrates its independence today built its founding on a handful of named liberties — speech, press, assembly, petition. Every one of them now runs, for most of humanity, over a single shared piece of infrastructure that the founders could not have pictured: a global, packet-switched network with no owner and no center. And that fact has quietly created a new liberty underneath all the old ones, a liberty no bill of rights protects because it did not exist to be threatened. Call it the freedom to connect — the ability to reach the network at all, before you have said a single word on it.
It is the substrate. You cannot exercise a right to speak on a network you have been cut off from, cannot publish through a blackout, cannot assemble in a group chat that has been switched off from a control room in the capital. And in 2026 it is the substrate that is under the most direct and least discussed assault — not what you may say once you are online, but whether you are permitted to be online in the first place, and whether the "online" you reach is still the same one everyone else can.
The numbers say the substrate is cracking.
One shutdown every day
In late March, the #KeepItOn coalition — a network of hundreds of civil-society groups convened by the digital-rights organization Access Now — published its annual accounting, and it was the grimmest on record. At least 313 internet shutdowns in 52 countries in 2025: more than any year since the count began in 2016. The coalition's campaign lead put the scale in a single sentence — not one of the year's 365 days passed without a shutdown somewhere in the world. Myanmar's junta and its rivals accounted for 95 of them; India, the world's largest democracy, ordered 65, more than any other democracy on earth. Conflict was the leading trigger, driving 125 shutdowns across 14 countries. And in a finding that should end the debate about what a shutdown is for, at least 70 of them coincided with grave human-rights abuses — killings, torture, rape, apparent war crimes — across 21 countries, the darkness falling precisely when and where the witnesses would have been most dangerous.
The bill for all of it, by the annual tally that the research group Top10VPN keeps, was roughly 19.7 billion dollars and 120,000 hours of deliberate darkness in 2025 — a 70 percent jump in cost over the year before — touching some 800 million people. Russia alone accounted for nearly 12 billion of those dollars, wounding its own economy to control its own citizens. These are floors, not ceilings: the count excludes the longest blackouts precisely because they never turned back on.
A shutdown, in other words, is not rare, not cheap, and — as the atrocity overlap shows — not usually about what its authors say it is about. It is becoming the default reflex of a state under pressure. And in 2026 the reflex is being wired into law.
The kill switch is legal now
On March 1, 2026, a Russian government decree — number 1667, written to run through 2033 — came into force, and it is the most important development in the architecture of control this year. It empowers a standing commission of the internet regulator Roskomnadzor, the security service, and the digital-development ministry to filter, throttle, block, or fully isolate the Russian internet from the global one whenever it declares a "threat." This is not an ad-hoc blackout ordered in a panic. It is a permanent, statutory off-switch, and it sits atop the machinery that makes it enforceable: the TSPU — deep-packet-inspection boxes physically installed on the network of every Russian internet provider, controlled directly by Roskomnadzor, with a build-out planned to nearly a petabit per second of capacity by 2030.
The evidence that the switch works already exists. In December 2024, in a drill across Dagestan, Chechnya, and Ingushetia, Russia cut access to foreign services for as long as a full day — and users could not escape it even with a VPN, because when the network to the outside world is severed there is nothing left to tunnel through. That is the crucial fact the rest of this piece turns on, so hold it: a block is a condition you can route around, and a blackout is not.
Around the same architecture, Russia is building the other half of a sovereign internet: a captive population on state-controlled apps. It blocked WhatsApp outright in February 2026, cutting off around a hundred million users, and throttled Telegram, funneling both toward MAX, a state-blessed messenger with no end-to-end encryption and its data stored inside the country. MAX went from roughly a million users in mid-2025 to more than 120 million registered by this spring, helped along by a mandate that it come pre-installed on every phone sold in Russia and by plans to wire it into the banking system. This is the model the phrase "splinternet" was coined for: not one internet with some sites blocked, but a parallel, monitored, encryption-free national network that a citizen can be nudged, and eventually required, to live inside.
Block, throttle, blackout
To see why the map going dark is both a real weapon and a self-defeating one, you have to see the ladder states climb, because circumvention wins on the low rungs and loses on the high ones, and honest analysis lives in that distinction.
Rung one is blocking — dropping the IP addresses or poisoning the domain lookups for forbidden sites, or filtering on the server name a connection reveals as it opens. This is the most common form of censorship and the most defeatable; it is where the entire circumvention toolkit works. Rung two is throttling and fingerprinting — slowing a service to uselessness, or using deep-packet inspection and "active probing," where the censor's own machines reach out to a suspected proxy to unmask it. China's Great Firewall, the mature reference for all of this, now leans on machine-learning classifiers that can pick obfuscated traffic out of ordinary web traffic, and a leaked trove last September revealed that its toolkit is now a turnkey export product, sold to and installed in Pakistan, Ethiopia, Kazakhstan, and Myanmar. Rung three is the total blackout — Iran's near-total national cut during the January 2026 protests; the Taliban's shutdown of Afghanistan the previous autumn — where there is simply no network to route around. And rung four is criminalizing the tools themselves, which converts the cost of connecting from "blocked" to "arrested."
Iran's own progression captures the sophistication. In 2019 it went dark the blunt way, withdrawing its routes from the global routing table so the country vanished. By January 2026 it had learned finesse: it withdrew 98.5 percent of one class of its address space while leaving the ordinary internet's routing 98 percent intact — a scalpel where there had been a sledgehammer, throttling and filtering while keeping the lights nominally on. The escalation ladder is the whole geometry of the fight: the higher a state climbs, the more it wins against code and the more it loses against its own economy and its own legitimacy.
The reasons they give, and the reason it's really for
The states doing this do not describe it as switching off a nation. They give four reasons, and the reasons are consistent enough across countries that they deserve to be taken seriously and then dismantled with evidence. The United Nations human-rights office, cataloguing the justifications, found public safety and national security cited in hundreds of cases; the 2025 shutdown report found the same recurring litany — fake news, hate speech, public order, and, most banal of all, stopping students from cheating on exams.
Take the cleanest-sounding one first, because it is the tell. Across June and July 2026, Iraq has been switching off the internet for the entire country in the pre-dawn hours on exam days to stop cheating — cutting hospitals, businesses, and emergency calls for roughly 900,000 students, at a cost estimated near a million and a half dollars a day, and, in the punchline that indicts the whole practice, the exam questions leaked anyway, during the blackout. A human-rights researcher called it "a hammer to smash something small." If the most defensible rationale collapses this completely, the graver ones fare worse. The best empirical work on shutdowns and protest finds that cutting the network does not calm unrest; it tends to push movements from non-violent coordination toward violence, because peaceful protest is the tactic that most depends on real-time communication. And the atrocity overlap is the moral core: when 70 shutdowns in a single year fall across countries in the hours their forces are bombing homes, hospitals, and schools, the blackout is not protecting the public. It is protecting the perpetrator from the witness. "Public safety" turns out, on the evidence, to most reliably mean the safety of the people pulling the trigger.
Criminalize the tunnel
When a state cannot block a tool, its next move is to outlaw it — the network-layer version of prosecuting the maker. The clearest 2026 case is again Russia, which by February had blocked 469 separate VPN services, banned the three most popular circumvention protocols outright, forced Apple to pull hundreds of VPN apps from its Russian store, and issued a directive requiring major platforms to detect and cut off users arriving over a VPN or lose their license to operate. The pattern is spreading and it is not confined to autocracies: Iran criminalized "unauthorized" VPN use; a data-retention proposal expected from the European Commission this year could force the logging that no-log VPNs are built specifically not to do; and in Britain the House of Lords passed an amendment to restrict VPN use by minors as a way to shore up the Online Safety Act's age checks — even as the regulator concedes that VPNs make those checks unenforceable and sign-ups surged as much as eighteen-fold when the checks went live. (The widely cited figure that dozens of countries now impose VPN data-retention mandates traces mostly to industry marketing and should be read as directional, not gospel — but the direction is unmistakable.) The tunnel is being criminalized because it works, and outlawing it is what a censor does when the engineering has failed.
The network routes around damage
Here is the other truth the day demands, and it is not naive optimism; it is what the evidence of 2026 actually shows.
In January, at the peak of the worst internet shutdown Iran has ever imposed, a single circumvention tool — Psiphon — carried 9.5 million unique users inside Iran in one day. More than one Iranian in ten reached the outside world, through a national blackout, on one app on one day. And roughly half of that traffic flowed not through corporate servers but through "Conduit" stations run by ordinary members of the Iranian diaspora on their spare phones and home Wi-Fi — some 200,000 of them signing up in a two-week span to lend their connections to strangers behind the wall. Psiphon's own description is the sentence to remember: the diaspora wasn't just supporting the infrastructure, the diaspora was the infrastructure.
That is the design principle the whole open internet was built on, tested under fire. The tools that survive a censor — Tor's Snowflake, which turns thousands of volunteers' browser tabs into disposable, constantly-moving relays; Jigsaw's Outline, disguising forbidden traffic as ordinary web traffic for tens of millions of users; URnetwork's peer-to-peer overlay, which splits a connection across a mesh of user-run providers so that no single node ever sees the whole flow and there is no one chokepoint to block, throttle, or subpoena — all share one move. They make the forbidden traffic look like the permitted kind, and they refuse to depend on any single point a state can seize. A splinternet built on inspection boxes at every provider is defeated not by digging a bigger tunnel but by declining to give it one throat to choke. This is why the censor is forced up the ladder in the first place: it cannot win at the protocol layer, so it reaches for the blunt instrument. The blackout is the admission of defeat.
The honest ceiling
But an honest edition states the ceiling as plainly as the win, because a triumphalist read gets people arrested.
Code cannot tunnel a total blackout. When the network to the outside world is severed — rung three — there is nothing to obfuscate and nowhere to route; the only path under it is a satellite dish, and Iran answered the smuggled Starlink terminals that appeared during its protests with radio jamming that induced up to 80 percent packet loss, terminal seizures, and a penalty of up to ten years in prison for possession, so that the sky route protects a courageous few rather than a population. Code cannot repeal a law, either: when the tool itself is criminalized, the fight moves from the engineer's problem to the lawyer's and the organizer's, and the personal cost of connecting rises accordingly. And the hardest limit is the human one — in Russia, a wired and educated country under heavy censorship, only about a third of people use a VPN at all, skewed young and affluent, with roughly half the population not knowing how. Circumvention is disproportionately the resilience of the already-advantaged.
So the correct claim is narrow and it is enough: circumvention is resilience, not immunity. It wins outright at rungs one and two, where most censorship actually lives; it buys time and carries truth out at rungs three and four, where it cannot win alone. Nine and a half million Iranians got through a blackout — and the blackout still fell, and people still died in the dark. The lesson is not that the wall is harmless. It is that the wall is beatable at the layers where the fight is usually fought, and that the state only escapes to the layers where it isn't by paying a price — in money, in legitimacy, in the spectacle of a government cutting its own banks off to silence its own people — that it cannot pay forever.
Democracies build the same gate
None of this is a story only about autocracies, and pretending otherwise is how democracies sleepwalk into it. India leads the democratic world in shutdowns and has for years. Britain is weighing VPN restrictions and has built an age-verification regime that pushes toward identifying every user. The European Union is drafting the data-retention rules that would break the no-log VPN. The gate a democracy builds to protect children or preserve exam integrity is, at the level of architecture, the same gate an autocracy builds to hunt a dissident — a chokepoint, an identity requirement, a legal lever over the tools of anonymous connection. A gate does not remember why it was installed, and the fifteenth consecutive year of declining internet freedom, by Freedom House's count, is the sound of gates being installed on both sides of the political spectrum at once. The point is not that London is Moscow. It is that the infrastructure of a fragmented internet is being poured in free countries and unfree ones alike, and concrete, once poured, is hard to remove.
The counter, layer by layer
What actually holds on July 4, 2026? The honest accounting splits along the ladder.
Against blocking and throttling — rungs one and two — the user-side stack wins, and it is exactly what this publication builds toward. DPI-resistant transports that mimic ordinary traffic, volunteer relay meshes with no fixed address to blacklist, and peer-to-peer overlays that bind no route to a single carrier and hand no single node the whole flow: these route around the most common forms of censorship, and the harder a censor pushes at this layer, the more it risks blocking the ordinary traffic the forbidden traffic imitates. URnetwork's provider mesh is a bet on exactly this property — resilience through decentralization, the network's founding principle turned into a product.
Against the blackout and the criminalized tool — rungs three and four — code runs out, and the fight becomes legal and political. You cannot litigate a protocol into a country that has cut the wire and outlawed the protocol; there the work is keeping the tools legal where they still are, funding the diaspora meshes and the satellite backstops, documenting the atrocities the dark is meant to hide, and refusing — in the democracies still deciding — to pour the concrete in the first place. The strong version of the argument is not that technology defeats the splinternet. It is that technology, law, and human solidarity together deny the state the one thing the splinternet requires: a single point at which the many can be cut off from the many.
Route around the border
The internet was designed with no center on purpose. Its founding architecture — packets that find their own way, routes that reconfigure around a failure — was built by people who wanted a network that could survive the loss of any piece, and the happy accident of that engineering was a network that treats a censor's block the way it treats a severed cable: as damage, to be routed around. The splinternet is the attempt to undo that accident — to install the center the network was built to do without, so that there is finally a switch, in a room, that turns a nation off.
On the Fourth of July, the freedom worth naming is the one under all the others: the freedom to reach each other without asking a government's permission, over a network that no capital owns. Three hundred and thirteen times last year, a government reached for the switch. Nine and a half million people, in a single day, in the dark, reached around it. The map is going dark in places, and the honest response is neither the doom that says the splinternet has already won nor the fantasy that says a clever tool makes borders irrelevant. It is the patient, unglamorous work of building and defending a network with no throat to cut — in code, in law, and in the two hundred thousand strangers who lent their phones to people they will never meet.
Build the network that has no off-switch. It is the only kind that stays free.
URnetwork is a peer-to-peer overlay for censorship-resistant transport, designed to resist network-layer Deep Packet Inspection by splitting traffic across a decentralized mesh of user-operated providers so that no single node sees the whole flow and no single chokepoint can block, throttle, or log it; its code is open and auditable, and its February 2026 MCP server release lets agentic clients establish sessions over the overlay. It is honest about its limits: it routes around blocking and throttling, but — like all circumvention — it cannot tunnel a total blackout or repeal a law that outlaws the tool, which is why this edition argues the freedom to connect has to be defended in statutes and solidarity as well as in code.
https://ur.io