9 points
It is possible to detect if traffic is being tunneled through a VPN with deep packet inspection. The great firewall actually does this and blocks popular VPN protocols like wireguard. However its possible to bypass the firewall by hiding/masking the traffic as being HTTPS data (like visiting a website) with software like shadowsocks.