Try to get a middle hop somewhere at a russian datacenter. Sometimes these have DPI censorship boxes disabled (?) -- I know one that lets me forward simple Wireguard from mobile routers to a EU server with a few SNAT/DNAT rules, even though ordinarily that would get blocked at first sight.
(Sadly, it's just Mikrotik gear that can't use any fancy censorship evasion protocols).
(Sadly, it's just Mikrotik gear that can't use any fancy censorship evasion protocols).