How Government Internet Shutdowns Work—and Why They Spread
Internet shutdowns are no longer rare emergencies — governments worldwide are deliberately severing or throttling connectivity to suppress protests, control information, and silence dissent. Here is how they work technically, and why they are becoming more common.
What Is an Internet Shutdown?
An internet shutdown is the deliberate disruption of internet or mobile data services by a government or its agents, typically to suppress the flow of information during protests, elections, or armed conflict. Unlike accidental outages caused by cable cuts or hardware failures, shutdowns are intentional acts of policy — ordered by authorities and carried out by internet service providers under legal or coercive pressure.
The tactic is no longer exotic. According to Access Now's 2024 report, researchers documented 296 shutdowns across 54 countries in a single year — a 35 percent increase in the number of affected countries compared to 2023. India, Myanmar, Ethiopia, and Iran are among the most frequent users of the tool.
The Technical Toolkit
Governments do not flip a single switch to kill the internet. They use several overlapping technical methods, often in combination.
BGP Route Withdrawal
The internet routes data using the Border Gateway Protocol (BGP), a system where every network continuously announces which IP address ranges it can reach. When a government orders ISPs to withdraw these announcements, IP addresses effectively vanish from the global routing map. Traffic destined for those addresses has nowhere to go. According to the Internet Society, this is one of the bluntest methods — fast to implement and nearly total in effect.
DNS Manipulation
When you type a web address, your device queries a Domain Name System (DNS) resolver to translate it into an IP address. Authorities can instruct state-controlled resolvers to return false results — pointing users to error pages or dead addresses — without touching the underlying network infrastructure at all.
Deep Packet Inspection (DPI)
More sophisticated shutdowns use deep packet inspection, in which specialized hardware examines the content of every data packet crossing a network. DPI can identify and block specific apps, protocols (such as VPN tunnels or encrypted messaging), or types of traffic while leaving other services intact. It can also throttle bandwidth — slowing connections to the point of being unusable without technically cutting them off, making the disruption harder to prove.
The "Stealth" Shutdown
Iran's approach, documented by Cloudflare and Rest of World, represents a newer model. Rather than withdrawing BGP routes — which is globally visible and immediately reported — the regime keeps routing announcements alive while severing domestic access through DPI, throttling, and selective protocol blocking. From outside Iran, the network looks reachable. For citizens inside, it is not.
Why Governments Do It — and Who Pays
The stated justifications range from preventing exam cheating (India has shut down internet in entire states during school tests) to stopping the spread of "misinformation" during elections. In practice, research compiled by the World Economic Forum shows shutdowns consistently correlate with political repression: they peak during protests, disputed election results, and military crackdowns.
The economic cost is enormous. Top10VPN estimates that government shutdowns cost the global economy $19.7 billion in 2025 alone. Businesses lose revenue, hospitals lose access to electronic records, and remote workers are paralysed. A 2022 UN human rights report found that shutdowns had disrupted schooling, blocked medical information, and prevented journalists from documenting abuses — effects the report described as "dramatic and far-reaching."
The Next Frontier: Two-Tier Internet
The most alarming trend is not the blunt shutdown but the tiered internet — a system in which connectivity becomes a privilege rather than a right. Iran has been building a National Information Network, a government-controlled intranet that keeps regime-approved services running while cutting citizens off from the global web. Freedom House's 2025 report warns that this model is being studied and copied by other authoritarian governments.
In such a system, the internet is not simply switched off — it is restructured, with access to the outside world reserved for elites, security services, and approved businesses. For the rest, a curated national intranet replaces the open web entirely.
Can Shutdowns Be Circumvented?
Ordinary VPNs offer limited protection against advanced shutdowns: DPI can detect and block VPN handshakes. More resilient tools — such as the Tor network or obfuscated proxies like Shadowsocks — are harder to block but slower and less accessible to non-technical users. Satellite internet services like Starlink can bypass ground-level controls but require hardware that many citizens in affected countries cannot obtain or afford.
The arms race between censors and circumvention tools continues. What is clear is that the internet's architecture was not designed to resist governments that control its physical infrastructure. As long as all of a country's international connections pass through a small number of government-controlled exchange points, the ability to shut it down remains — and the incentive to use that power is growing.
