I am reading these stories about cheburnet in Russia, the "great wall" in China and probably more countries or group of countries (like the EU) could create something simular in the future.
This fragm...
The correct setup for now is to route the connection through servers inside the country, located in large data centers and have external connection. Direct connections to foreign VPS are quickly detected and cut off. Therefore you need proper set of SNI and a combination of obfuscation and VPN protocols to make traffic analysis as difficult as possible.