In reply to
willyem
Best way to block such agencies: https://github.com/C24Be/AS_Network_List
This isn't the "best" solution. Having 2 IP addresses for inbound and outbound is, but then again we don't really know how effective that is since it wasn't established what caused a block begin with. If a censor simply buys a subscription - i hope you see how any of those measures wouldn't be effective.
I think it's well known that VPN providers separate users into groups in order to provide them a secluded list of servers to enumerate censors this way, but doing this more effectively (rotating servers often) would harm people who use clients without subscription support.
It should work as the part global NGFW for VPN service against automated checks. Dual hop is too. Buy subscriptions...for hundreds of VPN services...good luck guys 😜btw a VPN service could insert sanity period for new subscribers limiting qty of different connectors to its servers.