Tor Bridges for Cuba: Circumventing ETECSA Internet Restrictions

ETECSA's monopoly provides complete visibility into Cuban internet traffic. Content blocking operates at multiple levels: DNS filtering blocking thousands of websites, IP blocking of known VPN server addresses, DPI disruption of standard Tor connections and many VPN protocols, and during crises, complete mobile data shutdown. Websites blocked include: 14ymedio (Cuba's main independent newspaper), CiberCuba, Diario de Cuba, El Toque, Periodismo de Barrio, Radio Martí, and international news sites covering Cuba. ETECSA also blocks Google and Cloudflare DNS resolvers, forcing users to use ETECSA's own DNS which implements filtering. obfs4 bridges bypass the DPI fingerprinting. Snowflake bypasses both DPI and IP blocking by using WebRTC through ETECSA's CDN routing (where blocking WebRTC would disable video calling services that Cuban families rely on for international family calls).

Cuban users primarily access the internet via ETECSA's mobile data (Nauta Hogar home internet is available in some areas but limited). On ETECSA mobile: obfs4 fresh bridges (not built-in which are more likely blocked) provide access during normal operation. Snowflake is particularly effective because ETECSA cannot block WebRTC without disrupting WhatsApp and Messenger video calls - critical communication channels for Cubans with overseas family. Configure Tor Browser with both obfs4 and Snowflake bridges as fallback options. During ETECSA's documented outage periods (political crises, protests), all internet may be unavailable regardless of bridge configuration - bridges cannot restore service during a complete ISP-level shutdown.

Access to Tor bridge information in Cuba relies on distribution networks that predate and parallel ETECSA internet access. The Paquete Semanal (Weekly Package) - Cuba's famous sneakernet where terabytes of digital content are distributed via USB drives weekly - has been used to distribute bridge addresses and Tor setup instructions. Cuban diaspora communities maintain contact with family and civil society inside Cuba via WhatsApp and Signal, sharing bridge addresses through these channels. Some Cuban journalists and activists receive bridge addresses from international press freedom organizations through secure channels. Redundant distribution methods ensure bridge information reaches users even during internet restrictions.

During the July 11-12, 2021 protests - the largest anti-government demonstrations in Cuba in decades - ETECSA implemented mobile data shutdowns in multiple provinces. Users who had downloaded Tor Browser and bridge configurations before the shutdown could not use them once connectivity was cut. The shutdown demonstrated that for maximum preparedness, Cuban users should: pre-download Tor Browser and configure bridges before anticipated events, maintain updated bridge configurations (request new bridges weekly), store Tor configuration in the Paquete-accessible format for distribution, and communicate bridge addresses to trusted contacts before connectivity disruption. Organizations monitoring Cuban internet freedom (NetBlocks, OONI) document ETECSA shutdowns in real time for international advocacy.

Bridge operators outside Cuba who want to support Cuban internet freedom can: run dedicated obfs4 bridges on Iceland or European VPS servers, configure bridges with BridgeDistribution obfs4 for Tor's distribution system which serves Cuban users, or directly coordinate with organizations supporting Cuban civil society (14ymedio, CiberCuba, Center for Democracy in the Americas) to provide private bridge addresses. Snowflake proxies are particularly valuable for Cuba because they bypass ETECSA's most aggressive blocking mechanisms. Contributing Snowflake proxies by running the browser extension or standalone server proxy requires minimal technical setup and directly benefits Cuban users during ETECSA disruptions.