Contd. M22: Myanmar
Myanmar and Geedge
According to research published by activist group Justice for Myanmar in June 2024, after
May 2024, Myanmar’s internet censorship system was supplied by Geedge Networks.62
The leaked documents suggest, however, that implementation of the system began in the
previous year, 2023, two years after the junta took power.
The source documents provide a snapshot of Geedge’s system as it was before the 2025
earthquake.63 Until 2024, the documents record that the military junta was successfully
blocking connections to the internet, VPNs, and even anonymity networks like Tor.
The documents about Myanmar include: planning documents for the implementation of
Geedge’s system; a deployment plan; network topology; change logs; statistics; tests on
how well Geedge’s service can block circumvention tools like VPNs; and communications
related to fixing hardware, software and performance issues.
In addition, documents from a different source include a draft, unsigned contract “between
the Government of the Republic of the Union of Myanmar, Ministry of Transport and
Communications,” as the purchaser, and an unnamed company with a Chinese bank
account in Beijing, as the supplier, for the procurement of a “secure web gateway” product.
The only date on the contract is the year 2023.
A change log for Myanmar records a creation date of November 2023 and can be
considered a snapshot in time. This log lists data center names, the cities where they are
hosted, information about capacity and traffic, and number of servers installed at each data
center for Geedge’s use. The log suggests that, by the end of 2023, Geedge’s systems
were installed in 30 data centers. A later progress report, dated February 24, 2024, shows
the implementation status of its systems in three cities at 100%.
A
network
containing
and
deployment
network
diagrams,
planning
shows
document,
data
corroborated
centers
in
Yangon,
by
other
documents
Mandalay,
Tachilek,
Naypyidaw, Muse and Myawaddy. The National Command Center, where responsible
authorities manage and control the traffic, is in Naypyidaw, although the table shows that
there is a second national center in Yangon. The national centers are run by Geedge, and
regional centers are run by the ISPs and contain Geedge systems which are coordinated
from the national center. Additionally, a response to a client from an unnamed Geedge
employee refers to the Naypyidaw national center as “mainly for display,”65 indicating the
Yangon site is the real command-and-control center. In total, the table has 30 data centers,
two national centers, and 28 regional centers across these six cities.