[odiroot]

That's a really big hassle when you need to use the tunnel and the IP has been burned. You actually need the same tunnel to manage your servers.

GFW even blacklisted my personal domain because I was running DNS queries against it to establish my SS tunnel. At least it seems like it.

[iforgotpassword]

I got annoyed by this too much a couple years ago, also the fact that they seem to be able to detect most if not all tunnel types and randomly inject packets that will break the connection. So I proceeded to quickly hack up a simple tunnel based on the surprisingly simple to use tun devices. The protocol was UDP based, didn't support any kind of connection reset, was not encrypting but just masking via xor, and contained some simple but cool tricks (as far as I'm concerned ) to deal with the high packet loss across the gfw you'll experience depending on time of day. Sure not ideal if you permanently live there or want to spread sensitive information, but all I want is decent browsing experience when accessing "our" internet. I was happy when 720p videos played without buffering on YouTube.

[Canada]

What? Just ssh elsewhere and manage from there. And don't use DNS for you proxies. Push updates to your crew out of band.