It talks primarily about configuring services (in China) to ensure resistance against DNS leaks and DNS poisoning.