Cloudflare's ECH can bypass blocked domains directly

admin

The Cloudflare CDN by default starts the ECH feature for free plans, but there is no "encrypted Client Hello (ECH) option" in the SSL -> Edge certificate section when paying for the plan. Only paid plans allow you to manually turn off or on ECH. Pinging a blocked domain like test.com on itdog.cn, which sometimes resolves to incorrect IP addresses such as those from KT and Deutsche Telekom, will work after enabling ECH, without needing a proxy. However, ECH is not always effective; I still have one domain that gets reset, while another does not. There can be situations where it works at first but then stops working later. The three main reasons for blocking domains include:
1. Getting incorrectly resolved to IP addresses from Korean KT and German Telecom etc., this is useful but not guaranteed.
2. High DNS pollution, meaning getting dozens of incorrect IP addresses, none of which were Twitter, Facebook, Dropbox, etc. Even with ECH enabled, it doesn't seem to help much.
3. Resolving the IP correctly, but ssl being reset, I haven't tried this yet.
I haven't tested it in Fujian or Henan provinces, nor other cases of being blocked. It seems high walls might target Cloudflare in the future, but currently all free plans' domains start with ECH, and there's no option to disable it.