Iran: Internet shutdown from 7 UTC 28 February 2026

[gusgustavo]

From Cloudflare Radar: "Internet connectivity in Iran is now in a near-complete shutdown, down about 98% vs the previous week. The disruption began around 07:00 UTC, following reports of military strikes — and in past incidents the government has responded with nationwide Internet shutdowns.
Internet traffic in Iran is close to zero across all major regions. There’s a near-complete shutdown in Tehran, Fars, Isfahan, Alborz Province, and Razavi Khorasan, among others."

Thread: https://noc.social/@cloudflareradar/116148155514554262

IODA: https://ioda.inetintel.cc.gatech.edu/country/IR?from=1772202427&until=1772288827&view=view1

[RememberOurPromise]

[wkrp]

The IODA chart shows the "Google Search" series at near zero, so I suppose google.com (216.239.38.120) is not currently reachable. What about api.github.com (140.82.121.6)? I suppose it is not as well, otherwise there would likely be more comments here.

https://noc.social/@cloudflareradar/116148176211551991 says some BGP routes have been withdrawn:

Starting around 07:00 UTC, Iranian networks began withdrawing portions of their BGP routes. By 10:30 UTC, the amount of IPv4 space announced globally had fallen even further, a pattern consistent with a nationwide Internet shutdown (as seen in January 2026).

The Data Explorer shows it's a small fraction of /24s:

[siq0o]

The IODA chart shows the "Google Search" series at near zero, so I suppose google.com (216.239.38.120) is not currently reachable. What about api.github.com (140.82.121.6)? I suppose it is not as well, otherwise there would likely be more comments here.

Tested with the paqet ping function, and nothing reaches outside (two different ISPs).
Right now i'm connected with slipstream / dnstt which requires finding a working resolver with Internet access.
Apparently few providers are still connected, have no way to confirm tho.

[wkrp]

Are people on the inside able to get photos / videos out? Are they able to exchange messages with friends and family? How can we help?

I am seeing activity on the dnstt-server from #561 (comment), and with the DNS TXT graph at #586 (comment) I guess DNS tunnels are the only thing that is so far known to work (at least a little).

[v-zza]

There are a few DNS servers reachable on both sides. They primarily do not support DoT or DoH, but dnstt over UDP (53) establishes a session with no traffic passing through when the server is setup on the free side. I suspect the direction of the connection will have an effect on this. I'm attempting a few tests and will update this thread with follow ups.

[amiremohamadi]

data centers are very restricted. 8.8.8.8 (and a few other) are only reachable on some limited ISPs

[gusgustavo]

Hi, I installed a dnstt Tor bridge server following https://www.bamsoftware.com/software/dnstt/, feel free to use it:

Tor dnstt bridge

1. Download the dnstt client for your platform: https://dnstt.network/

2. Save this public key as server.pub:

241169008830694749fe96bb070c4855c5bb5b9c47b3833ed7d88521ba30a43f

3. Run dnstt-client:

./dnstt-client -doh https://dns.google/dns-query -pubkey-file server.pub t.ruhnama.net 127.0.0.1:7000

4. Open Tor Browser and add this Bridge line to Tor Browser:

Bridge 127.0.0.1:7000 A998F319ADB60EE344540EC4B21524CC484F96BE

Please note that you change the DoH/DoT server to one that is reachable in IR.

Or if you want to use dnstt without tor, you can use it:

pubkey: 241169008830694749fe96bb070c4855c5bb5b9c47b3833ed7d88521ba30a43f
domain: t.ruhnama.net

[Phoenix-999]

@gusgustavo

---

Public-key 1️⃣

241169008830694749fe96bb070c4855c5bb5b9c47b3833ed7d88521ba30a43f

Domain name 1️⃣

t.ruhnama.net

---

اپلیکیشن‌های موردنیاز برای استفاده از DNSTT

برای استفاده از سرویس DNSTT، بسته به سیستم‌عامل خود می‌توانید از اپلیکیشن‌های زیر استفاده کنید:

Android / macOS / Windows / Linux
اپلیکیشن رسمی DNSTT XYZ:
https://github.com/dnstt-xyz/dnstt_xyz_app/releases

Android
NetMod VPN Client (پشتیبانی از DNSTT / V2Ray / SSH):
https://play.google.com/store/apps/details?id=com.netmod.syna

---

DNSTT.XYZ-Video-Guide.mp4

---

[fortuna]

Using AI for traffic analysis

The Cloudflare Radar MCP server is a very helpful for asking questions about the network conditions in Iran, as it plugs into the Radar APIs.

TIC seems to be the only way out

It actually helped me uncover that TIC has about 25-30% of its normal peak levels

Traffic from TIC

Getting out via TIC

The MCP server is aware of the BGP connections, and helped me investigate the networks connected to TIC:

Among them, Hostiran seems to have the most bandwidth that is potentially usable:

Traffic from Hostiran

People may want to explore deploying servers there.

[gusgustavo]

New dnstt servers:

• Domain: t.cryptomeanscryptography.club
• MTU: 1232
• Tunnel mode: socks
• Service user: dnstt
• Listen port: 5300 (DNS traffic redirected from port 53)

Public Key: 172aa6b63080a9e4e87dc1bca4eb5906b9dde41f77096e43a806e77e6e069c27

• Domain: t.grampo.org
• MTU: 1232
• Tunnel mode: socks
• Service user: dnstt
• Listen port: 5300 (DNS traffic redirected from port 53)

Public Key: 44bc8ce765add3f6c1aca8a40a355be420a8b40db7deae148e26a2ee88418c0b

[CappyT]

Some dnstt and slipstream:

DNStt:

Server: t.nolicen.se
Key: be93ebf0184bd4f2577abe3df3a3ff00844135c82b108afbdddbb2b5f0df5b28

Slipstream:

Server: s.nolicen.se
Cert:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

[aburnap]

Please see and share below. Two DNSTT endpoints (Moldova, USA) @ 10GBps.

SERVER - USA

Domain name

t.yale.dog

Public-key

edc8edd0a713f24c65df5130f405668ac9b0ecb352c84741a22e0825a0b01e28

SERVER - Moldova

Domain name

t.nothingtohide.dad

Public-key

c4f5ad203681237b612c7c7881897dfaa1e2fafb1c912dc1ed47114f739e3060

[@Phoenix-999 ] - Please allow me to copy-paste your message + video below.

اپلیکیشن‌های موردنیاز برای استفاده از DNSTT

برای استفاده از سرویس DNSTT، بسته به سیستم‌عامل خود می‌توانید از اپلیکیشن‌های زیر استفاده کنید:

Android / macOS / Windows / Linux اپلیکیشن رسمی DNSTT XYZ: https://github.com/dnstt-xyz/dnstt_xyz_app/releases

Android NetMod VPN Client (پشتیبانی از DNSTT / V2Ray / SSH): https://play.google.com/store/apps/details?id=com.netmod.syna
DNSTT.XYZ-Video-Guide.mp4

dnstt_guide_in_FARSI.mp4

[gusgustavo]

@Phoenix-999, I deployed a simple telegram bot: http://t.me/getdnsttbot.