VPNs stick out in Wireshark or other packet captures like a red flag, and blocking most VPNs is as simple as closing port 500. (Port 500 is the default. Who cha

VPNs stick out in Wireshark or other packet captures like a red flag, and blocking most VPNs is as simple as closing port 500. (Port 500 is the default. Who changes default settings?) In Wireshark, normally you'll see flurries of variable-sized traffic across 53 then either 80 or 443. But for a VPN, you just see a constant flow of boring packets over 500. Why doesn't China's national firewall block port 500? Possibly because it would also block the personal VPNs of the leadership of the Chinese government. (Edits for clarity)