Proton VPN now hands out a Chinese IP, from Hong Kong

Proton VPN added China to its country list on 3 September 2026, and the Proton VPN China server is not in China. The company's release notes put it plainly: it now offers smart routing servers in China, and its own documentation lists where the hardware actually sits. For China, that is Hong Kong. The address you get is Chinese, the machine handling your traffic is not, and for once that distinction is the whole point rather than a footnote.

What Smart Routing actually does

Proton describes the mechanism without hedging: "Instead of running servers physically inside those countries, we use servers that are, in reality, located elsewhere." Its support page carries a country-by-country table of where the hardware lives, and the entries are worth reading before choosing a location. India routes through Singapore. Russia routes through Sweden and Estonia. China, now, routes through Hong Kong.

The reasoning is stated on the same page: Smart Routing "allows us to provide VPN access in countries where government censorship and restrictions would otherwise make it impossible (or less secure)." Putting a physical server inside a country with hostile rules means putting it within reach of those rules. Proton also says these are its own bare-metal machines and therefore "equally secure" to the rest of the network. That claim is about the hardware, not about geography, and both halves matter.

Who needs a Chinese IP address

The demand runs the opposite way to the usual VPN story. Most people buy a tunnel to look like they are somewhere else while at home; this is for people outside China who need to look like they are inside it. Chinese streaming platforms, music services, games and portals routinely check the address before serving anything, and from a European or American IP they simply decline. Students, families split across borders, journalists reading Chinese sources and companies checking how their own site renders locally all run into the same wall.

There is a second, quieter group: people in Hong Kong who want a foreign address without the latency penalty. Proton calls this reverse Smart Routing, where the country hosting the physical hardware gets an outside IP at local speeds.

Not the only provider, but a short list

A Chinese IP is rare in this market because a physical server in mainland China would sit under Chinese data rules, and no privacy-first provider wants that. The workaround is the same everywhere: keep the machine outside and hand out the address. Private Internet Access says openly that "you get a China IP address through a server based in a more privacy-friendly location." CyberGhost describes "virtual servers for China, safely hosted outside the country." PureVPN offers a Chinese location on the same basis.

So the news is not that Proton invented something. It is that a provider built around Swiss jurisdiction and no-logs engineering decided this was worth doing, and documented where the hardware sits instead of leaving users to guess. We covered the engineering side of that same instinct when Proton rewrote its VPN core in Rust and brought Stealth to Linux.

What it means for privacy

The practical answer is reassuring and boring: your traffic does not travel through mainland China, so it is not exposed to inspection or data-retention rules there. It travels to Hong Kong, under Hong Kong's legal reality, which is its own conversation and worth thinking about if your threat model is specific. What changes for the websites you visit is only the address they see.

The wider context is worth keeping in view. China has spent years making life difficult for tunnel providers, to the point of ordering carriers to physically unplug VPN infrastructure. A virtual Chinese location exists precisely because the real thing is not an option for a provider that wants to keep its promises about logs. That is the trade: you get the address, and the operator keeps the hardware somewhere it can still say no.