If you know the src and dst IPs, you can impose arbitrary firewall rules and cut down specific connections. That’s what China is already doing with their nation

If you know the src and dst IPs, you can impose arbitrary firewall rules and cut down specific connections. That’s what China is already doing with their national firewall. I’m not sure if there is an additional layer of encryption at both ends that would encrypt packet headers as well.