Comment by jeroenhd

DPI can figure out standard VPNs, including anyconnect, pretty well based on timing and packet sizes.

There are tools designed to evade DPI detection, but even those don't make out out of the Great Firewall of China most of the time.

Technical solutions to political problems only go so far.