The technology exists to firewall entire countries, afterall the ISP's connect to the larger "pipes", this has already happened in several countries. Sure you could probably tunnel a connection but the average person certainly can't, this fractures the internet.