.
├── ae-appendix
├── artifacts
│   ├── ceased-dynamic-blocking
│   ├── common
│   ├── setup-vps
│   ├── sink-server
│   ├── test-entropy
│   ├── test-printable-fraction
│   ├── test-printable-longest-run
│   ├── test-printable-prefixes
│   ├── test-protocol-fingerprints
│   └── utils
├── CHECKLIST
├── LICENSE
└── README.md

• ceased-dynamic-blocking contains the source code, data, and documentation on the observation that the GFW of China has stopped blocking random traffic dynamically at least since March 15, 2023.
• ae-appendix contains the source code and Makefile to generate the artifact appendix.
• artifacts/setup-vps contains the source code to set up remote VPSes.
• artifacts/sink-server contains the source code for a sink server, which runs on the server side.
• artifacts/utils contains client-side testing tools.
• artifacts/test-* contain five different tests. Each of them corresponds to a claim of the GFW's traffic exemption rules.
• artifacts/common-* is a module that contains code on which measurement tools are built.

To conduct the measurement experiments described in this repo, it requires at least one host in China and one host outside of China.

To assist the USENIX SECURITY'23 Artifact Evaluation, we provided the reviewers with two VPSes below.

If you are not an AE reviewer, but simply want to repeat some of the experiments yourself, you need to purchase and set up the two servers yourself.

1. We refer you to this README for detailed instructions.

2. To set up the client (VPS in China), execute:

./artifacts/setup-vps/setup-client/to_alibaba_server.sh

3. To set up the server (VPS in the US), execute:

./artifacts/setup-vps/setup-server/to_digitalocean_server.sh

4. Note that we have replaced the IP addresses of the two machines with strings of REDACTED_CN_SERVER_IP and REDACTED_US_SERVER_IP in our code and documentation. You may want to replace them with your servers' IP addresses (which are 1.1.1.1 and 2.2.2.2 in the below example), using some commands like these:

find . -type f ! -name "*.pcap" ! -path '*/\.*' -exec sed -i "s#REDACTED_US_SERVER_IP#1.1.1.1#g" {} \;
find . -type f ! -name "*.pcap" ! -path '*/\.*' -exec sed -i "s#REDACTED_CN_SERVER_IP#2.2.2.2#g" {} \;

ssh usenix-ae-client-china

head -c200 /dev/urandom | nc -vn REDACTED_US_SERVER_IP 2

echo REDACTED_US_SERVER_IP | ./utils/affected-norand -p 2 -log /dev/null

endTime,addr,countSuccess,totalTimeout,consecutiveTimeout,code,affected
1678258922,REDACTED_US_SERVER_IP:2,2,5,5,timeout,true