System with various wires managing access to centralized res

IP blocks are a common issue for proxy nodes, and I’ve dealt with it many times. This article outlines the complete troubleshooting process.

Step 1: Confirm If It’s an IP Block or Something Else

When you can’t connect to a node, first rule out non-blocking causes:

# Test IP connectivity from mainland China (use mobile hotspot to rule out local network issues)
ping your_VPS_IP

# Test if the port is open
nc -z -w5 your_VPS_IP 443 && echo "open" || echo "blocked"

Common confusion cases:

SymptomLikely Cause
Ping fails, but SSH worksProtocol detected, port blocked
SSH also won’t connectIP is completely blocked, or VPS is down
Ping works, but connection is slowNetwork congestion, not a block
Only drops during peak hours (8-12 PM)QoS throttling, not a block

The fastest way to verify if an IP is blocked by the Great Firewall: ping from both domestic and overseas networks. If overseas works but domestic doesn’t = blocked.

Online tool: ping.pe — enter your IP to test connectivity from multiple countries.

Step 2: Emergency Switchover

If you have a backup node

This is the most important lesson: never rely on a single node.

My mihomo config has automatic failover:

proxy-groups:
  - name: "Auto Select"
    type: fallback          # auto-switches if a node goes down
    url: http://www.gstatic.com/generate_204
    interval: 30
    proxies:
      - DMIT-HK
      - DMIT-US
      - Tencent Cloud-JP

If the primary node gets blocked, it automatically switches to a backup within 30 seconds — seamless to users.

No backup node?

Temporary solution: Use a residential IP proxy. iProyal charges per GB with no monthly commitment — use a few GB to bridge the gap.

Quick fix: See the IP replacement options below.

Step 3: Replace the IP

Option 1: Swap IP in VPS control panel (fastest)

Some VPS providers support swapping IPs directly in the control panel:

  • Usually costs $1–5
  • DMIT can do this via support ticket
  • You’ll need to reconfigure your client

Option 2: Rebuild the VPS (fairly quick)

Destroy the current instance and spin up a new one in the same region — you’ll likely get a different IP.

Tip: Back up your config files before rebuilding.

# Back up Xray config
scp -P 18022 ubuntu@old_IP:/usr/local/etc/xray/config.json ./xray_backup.json

# Restore on new machine
scp -P 18022 ./xray_backup.json ubuntu@new_IP:/usr/local/etc/xray/config.json

Option 3: Switch regions

If a Hong Kong IP gets blocked, temporarily switch to a US or Japan node while you wait — sometimes blocked IPs get unblocked eventually.

Why IPs Get Blocked

A few common reasons:

1. Traffic signature detected
Legacy protocols (Shadowsocks, vanilla VMess) have obvious signatures and are easily recognized by machine learning. Fix: upgrade to VLESS+XTLS-Reality — see setup guide.

2. Port exposed
Exposing the proxy port on common ports (1080, 8080) makes it easy to discover via scanning. Use port 443 instead (disguised as HTTPS).

3. Poor IP range quality
Datacenter IP ranges are known and targeted for blocking. Native IPs and residential IPs have lower block rates.

4. Heavy traffic during peak hours
Between 8 PM and midnight, GFW enforcement increases, and high-traffic nodes are more likely to get flagged.

Long-Term Anti-Block Strategy

1. Distribute across multiple nodes
US + Hong Kong + Japan — at least three nodes. A single node getting blocked won’t disrupt your service.

2. Use high-quality VPS
DMIT’s native IPs and CN2 GIA backbone have significantly lower block rates than budget VPS with standard BGP.

3. Upgrade your protocol
VLESS+XTLS-Reality > VMess+WS+TLS > Shadowsocks. Migrating from legacy to modern protocols dramatically reduces detection rates.

4. Avoid high-risk activities

  • Don’t run BitTorrent/private trackers on proxy nodes
  • Don’t access heavily monitored websites in ways that expose your server IP
  • Keep nodes private (private nodes have much lower block rates than shared nodes)

5. Monitor node health regularly
Use Prometheus + Grafana to track latency and connectivity — spot anomalies immediately. Configuration reference


If you run into a specific IP block scenario, feel free to describe it on Telegram, and we can troubleshoot together.


📷 Cover image · Generated with Flux Schnell AI · panshi.io brand style