On May 27, 2026, Iran began partially restoring internet access after one of the longest nationwide shutdowns in modern history — 88 days nearly completely offline. Within hours of connectivity returning, VPN demand exploded. Proton VPN recorded a 6,000% surge in signups in a single day. The day after, that figure reached 17,500%.

The shutdown started on February 28, when the US and Israel launched strikes on Iran. Authorities described the blackout as necessary to prevent cyberattacks and espionage. It was later extended through months of unrest and economic disruption. During the blackout, most of Iran's 90 million citizens had access only to the country's domestic intranet — a heavily filtered version of the internet with no international connections.

What happened when the internet came back

As soon as connectivity returned, Iranians rushed to VPN services — not to pirate content, but to reach family abroad, access independent news, and reconnect with the outside world. The scale of demand made this one of the largest single-day VPN surges ever recorded.

But connectivity didn't fully return. NetBlocks, an internet monitoring organization, reported that Iran's overall connectivity had recovered to about 86% of pre-shutdown levels, while actual internet traffic remained closer to 40%. Mobile internet stayed largely disconnected. Google Play was blocked. Many apps remained inaccessible.

Iran is moving toward a permanent whitelist system. Rather than a temporary shutdown, Iran appears to be building infrastructure for permanent filtering — where only state-approved sites are accessible to most citizens. This is closer to North Korea's model than the Great Firewall's selective blocking.

Why commercial VPNs struggled

When millions of people flood onto the same VPN servers simultaneously, those servers become obvious targets. Shared IPs carry the traffic patterns of thousands of simultaneous users — exactly what deep packet inspection systems are trained to detect and block.

Proton handled the surge, but commercial VPN infrastructure is fundamentally vulnerable to this kind of scenario. The more users pile on, the more detectable the traffic becomes.

The structural problem with shared VPNs: Every user on a shared server adds to the traffic signature. A dedicated private server — used by one household — has no such pattern. There's nothing for a detection system to flag.

What this means for people in Iran, and beyond

Iran's trajectory points toward a tighter, more permanent form of internet control. The window to set up reliable circumvention tools may be narrowing — both technically, as the whitelist infrastructure develops, and practically, as enforcement tightens.

The pattern is not unique to Iran. Russia blocked WireGuard, OpenVPN, and IKEv2 at the protocol level in early 2026. China's Great Firewall continues to evolve. Each of these systems is better at detecting shared commercial VPN infrastructure than private, dedicated servers running traffic that looks like normal HTTPS.

The 6,000% signup surge tells you everything about how essential internet access has become — and how quickly people reach for tools to restore it when it's taken away. The question is whether those tools will still work when they're needed most.

Your own server — works in Iran, China, Russia, Turkey

One-time setup $99. Your dedicated IP on a $5/month VPS you own. No shared infrastructure, no mass blocking.

Contact on Telegram →