I don't think they outright ban VPN just yet, but even if they did: get the OpenVPN source, XOR every incoming and outgoing byte with your favorite constant. Th

I don't think they outright ban VPN just yet, but even if they did: get the OpenVPN source, XOR every incoming and outgoing byte with your favorite constant. That will already beat any packet detection engine out there (if you also take a little care to eliminate the "side channels", i.e. run it on a random port), while not compromising the security at all. I wish we could just have dynamically mutating protocols, and Tor et al are certainly working in that direction, but for a single person with the education, this would be my way to go.