Shadowsocks always used to work well enough to evade the GFoC if you hosted your own VPS. Which is simpler than say strongSwan - and IPSEC gives the game away anyway.

https://gfw.report/blog/ss_advise/en/

https://gfw.report/blog/ss_tutorial/en/