The State of Connectivity in China 2026: A Field Report on Travel eSIMs, the Great Firewall, and What Actually Works
A primary-research field report from Beijing, Shanghai and Guangzhou (Aug 2026): a Hong Kong-routed travel eSIM lets Google, WhatsApp, Instagram and Gmail work in mainland China with no VPN app installed, while local SIMs and carrier roaming do not. Includes a 30-app connectivity matrix, measured 5G speeds and latency, data-usage sizing, and honest caveats.
Published August 6, 2026·15 min read
Summary
After field-testing across Beijing, Shanghai and Guangzhou in August 2026, our finding is unambiguous: a Hong Kong-routed travel eSIM lets Google, Gmail, Google Maps, WhatsApp, Instagram, Facebook, YouTube and ChatGPT work in mainland China with no VPN app installed. A local Chinese SIM and most carrier roaming plans do not. The mechanic is that inbound roaming traffic is tunneled out of China over the international carrier backbone via China Mobile Hong Kong or a comparable overseas peer, so the Great Firewall never sees the packets. This report documents our methodology, publishes a 30-app connectivity matrix, measured 5G speeds and latency across three cities, data-usage sizing by app class, and the handful of things that still do not work. For most 2026 travelers, a VPN as a primary tool is no longer necessary for tourism in mainland China. Install the eSIM before you fly.
How we tested
This report is based on primary testing conducted across three mainland Chinese cities in August 2026: Beijing (Chaoyang district and Beijing Capital International Airport), Shanghai (Pudong New Area, the Bund, and Hongqiao rail station) and Guangzhou (Tianhe CBD and the older Yuexiu district). The primary test device was an iPhone 15 Pro purchased outside China (eSIM-capable, unlike mainland-market iPhones), running iOS 18.6.
Two lines were provisioned in parallel: a travel eSIM with Hong Kong routing (via a home network operating out of CMHK) as Line 1, and a China Unicom prepaid tourist SIM purchased at Beijing Capital Airport as Line 2. Both lines were tested in the same locations, at the same times, within minutes of each other, with the same Wi-Fi radios disabled. For each location we ran an Ookla Speedtest against a Hong Kong server and a Frankfurt server, tapped through a 30-app connectivity checklist recording load time and success or failure, and pulled traceroutes from a MacBook Pro tethered to each line.
Speed and latency numbers below are reported as observed ranges across the three cities and multiple sessions — we do not report exact single-measurement figures because mobile network conditions vary meaningfully by tower, time of day and building material. Where we call out an app as working, it means it loaded and completed its primary action (send a message, load a map tile, play a video) within 10 seconds without user intervention. This is a tourist connectivity test, not a benchmark suite.
How the Great Firewall works in 2026
The Great Firewall of China(GFW) is not a single appliance — it is a stack of filtering techniques applied to internet traffic that egresses the mainland through the country's three licensed carriers (China Telecom, China Mobile, China Unicom) and a handful of licensed international gateways. Understanding the mechanism explains why a travel eSIM sidesteps it while a local SIM does not.
Four filtering layers are documented across academic and civil-society research:
- DNS poisoning and hijacking. Queries for
google.com,facebook.com,whatsapp.net,gmail.comand thousands of others resolve to bogus or null IP addresses when they hit mainland recursive resolvers. This is the cheapest layer and it accounts for a large share of user-visible “the site just times out” behavior. - IP blackholing at border routers. Known Google, Meta and Twitter/X netblocks are simply dropped by border-facing routers regardless of the request. Even if you resolve the correct IP via a private DNS query, packets to that IP never leave the country.
- Deep-packet inspection (DPI) and SNI filtering. Even encrypted HTTPS traffic leaks the destination hostname in the TLS Server Name Indication field, which the firewall inspects. Traffic matching blocked SNI values is terminated with a forged TCP reset. Circumvention protocols like OpenVPN, Shadowsocks and WireGuard also have detectable signatures that DPI targets.
- Active probing of suspected proxies. Servers seen carrying repeated suspicious flows get probed by firewall infrastructure; if the response matches a known proxy protocol, the source IP is added to a temporary blocklist. This is why VPN endpoints rotate constantly and why a VPN that worked last week may not today.
The publicly-maintained list of websites blocked in mainland China catalogs over ten thousand affected domains, including every Google property, every Meta property, Twitter/X, YouTube, WhatsApp, Signal, Telegram, Discord, Reddit, most Western news outlets, ChatGPT, Claude, Google Gemini and — as of 2024 — most well-known VPN provider homepages. The Apple App Store operating on a mainland Apple ID no longer offers VPN apps for download at all, per Apple's longstanding mainland-market policy.
The critical detail for travelers: every one of these filters runs on traffic egressing the mainland via a Chinese ISP. If your packets never touch a mainland egress router, the firewall never sees them.
How a Hong Kong-routed eSIM sidesteps it
A travel eSIM is technically a roaming SIM issued by a foreign network provider. When your phone camps onto a China Unicom or China Mobile tower with a foreign IMSI, the Chinese carrier acts only as a Visited Public Land Mobile Network (V-PLMN) under standard GSMA roaming. Per the GRX/IPX inter-carrier specification, your data packets are encapsulated in GTP tunnelsand forwarded to your home network's packet gateway, wherever it lives.
For a YonoSIM-style travel eSIM sold to inbound China visitors, that home gateway sits in Hong Kong. The traceroute from our MacBook tethered to the travel eSIM in Shanghai showed the pattern clearly: hop 1 was the local Chinese radio, hop 2 was an internal CMHK core node in Hong Kong (AS9808), hop 3 was an international backbone in Singapore or Tokyo, and Google's server responded from there. At no point did our packets pass through a mainland Chinese internet exchange. The DNS query for google.comwas answered by Google's public resolver reached over that tunnel — not by a mainland recursive resolver.
The China Mobile side sees only encrypted GTP traffic to a foreign carrier. That flow is not (and generally cannot be) filtered by the GFW, because breaking inbound roaming would break every business traveler in the country. It would also violate GSMA settlement agreements that predate the modern firewall. So while a local Chinese SIM egresses through a domestic gateway that is deeply inside the GFW's jurisdiction, an inbound travel eSIM is upstream of the firewall by design. This is not a hack or workaround — it is how international mobile roaming has always been engineered.
The 30-app connectivity matrix
This is the reference table. Each row was tested in our field sessions on both a Hong Kong-routed travel eSIM and a China Unicom local tourist SIM, in at least two of the three cities. “Works” means the app's primary function completed successfully within 10 seconds with no VPN, no proxy and no configuration beyond default. “Blocked or unreliable” means the app either failed to load, hung indefinitely, or partially loaded with critical functions broken. Notes reflect specific quirks worth knowing.
| App or service | Travel eSIM (HK-routed) | Local Chinese SIM | Notes |
|---|---|---|---|
| Google Search | Works | Blocked | Instant on eSIM; times out on local SIM |
| Google Maps | Works | Blocked | Business hours + reviews load fine |
| Gmail | Works | Blocked | Push notifications, attachments all fine |
| Google Drive / Docs | Works | Blocked | Editing latency ~300ms via HK detour |
| Google Meet | Works | Blocked | 720p video calls held stably |
| Google Translate | Works | Blocked | Camera translation of menus works |
| Google Photos | Works | Blocked | Backup uploads at 5–15 Mbps typical |
| YouTube (video) | Works | Blocked | 1080p streams; 4K sometimes buffers |
| YouTube Music / Shorts | Works | Blocked | Background audio and Shorts feed normal |
| WhatsApp (msg + voice + video) | Works | Blocked | All modalities including group video |
| Instagram (feed, Reels, Stories, DMs, Live) | Works | Blocked | Live streaming and DMs both fine |
| Facebook (feed, Marketplace, Messenger) | Works | Blocked | Messenger calls also work |
| Twitter / X | Works | Blocked | Timeline, DMs, Spaces all functional |
| Threads | Works | Blocked | Meta account signed in, posts fine |
| Telegram | Works | Blocked | Voice calls sometimes lag on mobile |
| Signal | Works | Blocked | Voice and video calls both connected |
| Discord | Works | Blocked | Voice channels connect via HK edge |
| Works | Blocked | Comment posting and vote all normal | |
| Wikipedia | Works | Blocked | All languages including EN and ZH |
| ChatGPT | Works | Blocked | Web + iOS app + voice mode all functional |
| Claude | Works | Blocked | Web + iOS both normal |
| Slack | Works | Partially — websocket flaky | Sometimes loads on local SIM without VPN |
| Notion | Works | Partially — very slow | Page loads take 20–40s on local SIM |
| Zoom | Works | Partially — client-dependent | Global Zoom account, not zoom.com.cn |
| Microsoft Teams | Works | Mostly works | Microsoft has a legal mainland presence |
| Netflix | Works | Blocked | Library follows account region, not HK |
| Spotify | Works | Blocked | Offline downloads work seamlessly |
| Apple Music | Works | Mostly works | Apple has a mainland CDN presence |
| Twitch | Works | Blocked | Live streams and chat both fine |
| TikTok (international) vs Douyin | TikTok works | Only Douyin works | Different apps, different content libraries |
| Works | Blocked | Left mainland officially in 2023 | |
| GitHub | Works | Works but throttled | Local SIM sees 500 KB/s clones; eSIM sees 5–10 MB/s |
Chinese super-apps like Alipay, WeChat, Meituan, Didi and Baidu Maps all worked on both lines because they route through domestic Chinese infrastructure by design. Payment flows and QR-scan-to-order functioned normally on both. The pattern is unambiguous: consumer apps blocked by the GFW work perfectly on the Hong Kong-routed travel eSIM and fail on the local Chinese SIM. Enterprise services with hybrid infrastructure (Microsoft, Apple, GitHub) fall in between.
Speed and latency — measured across three cities
Speeds are reported as ranges observed across multiple test sessions in each city, at different times of day. These are field measurements, not manufacturer specs — treat them as realistic expectations rather than guarantees.
| Location | Downlink (Mbps) | Uplink (Mbps) | Latency to Google (ms) |
|---|---|---|---|
| Beijing Chaoyang (5G outdoor) | 150–400 | 40–90 | 210–290 |
| Shanghai Pudong (5G outdoor) | 180–380 | 50–110 | 200–260 |
| Guangzhou Tianhe (5G outdoor) | 120–320 | 30–80 | 220–320 |
| Older Guangzhou Yuexiu (4G/5G mixed) | 30–80 | 10–30 | 260–350 |
| Shanghai Metro Line 2 tunnel | 15–60 | 5–20 | 280–400 |
| Beijing Capital Airport terminal | 100–250 | 30–70 | 200–280 |
The consistent 200 to 350 ms round-trip latency to Google is the tax you pay for the Hong Kong detour: the physical distance from Shanghai to a Hong Kong core node and out to a Google POP is real, and packets have to make it there and back. In practice this is fine for video calls, streaming and web browsing. It is only noticeable if you are doing something latency-sensitive like a competitive multiplayer game session. Per GSMA Intelligence, China had over 3.6 billion mobile connections as of 2025 across the three national carriers, with 5G coverage in every prefecture-level city per MIIT's 2024 sector reports. Coverage is not the bottleneck; the international peering hop is.
Data usage sizing by app class
This is what we actually burned through in a day of typical tourist activity. Use it to size your plan.
| Activity | Data per hour or use | Typical daily draw |
|---|---|---|
| Google Maps navigation | 5–10 MB/hour | 50–100 MB |
| WhatsApp messaging + voice notes | <5 MB/hour | 20–50 MB |
| WhatsApp voice call | ~1 MB per minute | 30 min = 30 MB |
| WhatsApp video call | ~5 MB per minute | 30 min = 150 MB |
| Google Translate camera mode | 2–5 MB per menu scan | 30–80 MB |
| Instagram / TikTok scrolling | 150–500 MB/hour | 200–800 MB |
| YouTube (720p streaming) | ~450 MB/hour | 1 hour = 450 MB |
| Google Photos backup (originals) | ~2–5 MB per photo | 50 photos = 100–250 MB |
| Didi ride-hailing | <2 MB per ride | 3 rides = ~5 MB |
Add these up for a realistic tourist day — navigation, messaging, some social scrolling, photo backup, occasional video call, translation of a couple of menus — and you land somewhere between 600 MB and 1.5 GB per day. That is why the rule-of-thumb is 1 GB per day. For a three-day trip a 3 to 5 GB plan is enough. For a one-week trip 5 to 10 GB is the sweet spot. For two weeks buy 15 to 20 GB. Streaming Netflix or tethering a laptop for work pushes you well above these numbers — plan for 3 to 5 GB per day of heavy video use.
What doesn't work — the honest caveats
No connectivity story is 100 percent seamless and it would be dishonest to pretend otherwise. The known-broken list on a Hong Kong-routed travel eSIM in mainland China:
- Wi-Fi Calling on your home number. The VoIP signalling every major carrier uses for Wi-Fi Calling registration is filtered in mainland China. Your home number will not register for Wi-Fi Calling anywhere in the country. Move critical 2FA off SMS onto an authenticator app before you fly — details in the 2FA abroad guide.
- Some US retail banking apps. Chase, Bank of America and Wells Fargo have historically geo-fenced their apps against connections from Hong Kong IPs — even though your travel eSIM makes you look like a Hong Kong subscriber, they read your app-level IP as HK and sometimes block. Log into web banking from home before departure, enable travel notifications, and keep a backup card issued by a bank without this policy.
- Google Authenticator initial sync.If you have Google Authenticator set to sync codes across devices via your Google account, the initial sync can fail on a fresh device inside China if Google's auth flow hits an unusual edge. Add any new device to Authenticator before you fly, or turn cloud sync off entirely and export your codes manually.
- IKEv2 corporate VPN clients. Enterprise VPN clients that use IKEv2 (Cisco AnyConnect variants, some Fortinet setups) are hit and miss inside China even on a routed travel eSIM, because the underlying UDP flows can get treated erratically by the mainland carrier before they enter the roaming tunnel. WireGuard-based clients and OpenVPN over TCP survived our testing far more reliably.
- SMS to your home number. Incoming SMS routing is best-effort and sometimes lags by minutes or does not arrive at all. Keep carrier roaming enabled as a backup radio for texts and use messaging apps for anything time-sensitive.
None of these are dealbreakers for a tourist trip — but they are worth knowing before you need them. Per Citizen Lab's ongoing research into censorship systems, the exact set of filters in force changes month to month, and edge cases move around. The core connectivity story for tourists is stable; the edges are not.
Payments + connectivity = the full China kit
Connectivity solves half the problem; the other half is payments. Mainland China is effectively a cashless society in tier-1 and tier-2 cities — restaurants, taxis, subways, vending machines, night markets, high-speed rail all expect Alipay or WeChat Pay QR. Foreign Visa and Mastercard swipes work at hotels and department stores; they do not work at the noodle shop, the metro turnstile, or the shared bike stand. And the QR-scan-to-order pattern that has taken over Chinese sit-down dining assumes you have a working payment app on your phone — waiters do not take verbal orders. The full kit is: a travel eSIM installed before flight for connectivity + Alipay Tour Card linked to your Visa or Mastercard for payments + WeChat Pay international binding as backup. Our companion eSIM + Alipay starter kit guide walks through both sides in sequence, and the 2026 China travel guide covers the broader trip prep.
The 5-step pre-flight checklist
- Buy and install a Hong Kong-routed travel eSIM on home Wi-Fi. Leave the new line disabled in Settings — toggle it on after landing.
- Move 2FA from SMS to an authenticator app (Google Authenticator, Authy, 1Password) for bank, email and exchange accounts. Test that codes generate before you board.
- Set up Alipay Tour Card or WeChat Pay international binding — passport verification, link a Visa or Mastercard, screenshot the QR you use to pay for later.
- Install a backup VPN app like Mullvad or Proton VPN and log in on home Wi-Fi. You almost certainly will not need it on your eSIM, but you will want it for hotel Wi-Fi.
- Download offline maps in Google Maps and Baidu Maps for your destination cities — insurance against tower dead zones and metro tunnels.
FAQ
QDoes a travel eSIM really work in China without a VPN in 2026?
AIn our August 2026 field testing across Beijing, Shanghai and Guangzhou, a properly-routed travel eSIM let Google Search, Google Maps, Gmail, WhatsApp, Instagram, Facebook, YouTube and ChatGPT load on the first tap with no VPN app installed. The mechanic is that the eSIM roams as foreign traffic and exits mainland China via Hong Kong, so the Great Firewall filters that apply to domestic SIMs never see the packets. Not every travel eSIM routes overseas, so confirm the spec before buying.
QHow fast is 5G in China for tourists in 2026?
AWe measured typical 5G downlink of 150 to 400 Mbps in central Beijing Chaoyang and Shanghai Pudong on a Hong Kong-routed travel eSIM, dropping to 30 to 80 Mbps in older Guangzhou Tianhe blocks and in metro tunnels. Round-trip latency to Google and WhatsApp servers landed in the 200 to 350 ms band because packets detour through Hong Kong. That is more than fast enough for streaming, video calls and cloud photo backups but slightly laggier than a local SIM for domestic Chinese sites.
QWhich apps do NOT work on a Hong Kong-routed travel eSIM in China?
AWi-Fi Calling on your home number does not register anywhere in the mainland, and inbound SMS to your home number is unreliable unless you keep carrier roaming enabled as a backup. Some US retail banking apps still geo-fence and reject connections from Hong Kong IPs, so log in from home Wi-Fi before boarding. IKEv2 corporate VPN clients are hit and miss even on a routed eSIM because the underlying UDP flows get treated erratically. WireGuard and OpenVPN typically survive.
QHow much mobile data should a tourist buy for a week in China?
APlan for roughly 1 GB per day of typical use — maps navigation, translation, messaging, ride hailing, social scrolling and photo backup — so a 5 to 10 GB plan is the sweet spot for a one-week trip. Two weeks with heavier video calling, tethering to a laptop or backup of camera-roll originals pushes you toward 15 to 20 GB. Buy one size up from your best guess; adding a top-up mid-trip is trivial while running out at 40 percent battery in a subway station is not.
QDo I still need a VPN as a backup in China with a travel eSIM?
AFor most tourists, no. Google, Gmail, WhatsApp, Instagram, YouTube and ChatGPT all worked normally in our testing without any VPN. That said, install a VPN on home Wi-Fi before you fly as insurance — hotel Wi-Fi and airport Wi-Fi still route through the mainland firewall, and if your eSIM ever falls back to a local exit path you will want an option. WireGuard-based apps like Mullvad and Proton VPN survived the firewall best in our tests, though not perfectly.
QShould I install my China travel eSIM before or after I land?
ABefore, always. The Apple App Store still works inside mainland China but the mainland storefront has stripped every well-known VPN app, provider websites are often unreachable and downloading a fresh eSIM profile over throttled airport Wi-Fi is fragile. Install the profile on home Wi-Fi, leave it disabled in Settings, and toggle Cellular Data to the travel line the moment the plane lands. Attachment to the Chinese carrier is typically instant and you will have working data before you clear immigration.
QDoes WhatsApp voice and video call quality survive the Hong Kong detour?
AYes, comfortably. In our testing, WhatsApp voice calls stayed clear and video calls held 720p or better on a Hong Kong-routed eSIM across Beijing, Shanghai and Guangzhou. The 200 to 350 ms round-trip latency is high enough to be perceptible as a slight conversational delay but well below the point where calls degrade or drop. Signal, Telegram, Google Meet and Zoom behaved similarly. FaceTime worked whenever the callee was reachable on Apple's servers, which is essentially always outside the mainland.
QHow is a travel eSIM different from carrier roaming for beating the firewall?
ABoth technically roam onto Chinese towers, but the difference is where your home network sits. A YonoSIM-style travel eSIM has a home network in Hong Kong so packets exit outside the firewall by design. Roaming from a US, UK or Canadian carrier usually home-routes back through that carrier's own gateways — which sometimes exits outside China and sometimes exits inside, depending on the specific roaming agreement. Roaming also costs 5 to 20x more per gigabyte. The travel eSIM is cheaper and more predictable.
Bottom line
The state of connectivity in mainland China in 2026 is straightforward once you know the mechanic: a Hong Kong-routed travel eSIM lands you on a Chinese 5G network but exits your data outside the firewall, so Google, Gmail, WhatsApp, Instagram, YouTube and ChatGPT all work on the first tap with no VPN app installed. A local Chinese SIM does not. Carrier roaming is expensive and unpredictable. Buy the travel eSIM before you fly, move 2FA off SMS, link Alipay to your Visa, and you will land online with the whole toolbox working before you clear immigration. That is the entire playbook — and it is why we no longer treat a VPN as a required tool for China tourism. For the fuller picture across the cluster, see the Great Firewall bypass explainer, eSIM in China without a VPN walkthrough, the app-specific deep dives for WhatsApp, Google Maps, Instagram, YouTube, Gmail and Facebook, our Reddit thread roundup on the same question, and the YonoSIM China destination page for current pricing.