It’s a custom protocol that uses SSL/TLS, so it can be detected. It’s actually causing huge problems for many large Russian companies, as many use those protocols for remote access, work, etc.

As mentioned in the article you need something like “Shadowsocks”, which fully disguises the traffis as standard SSL/TLS.