Depending on the VPN type it appears like a completely different type of traffic. GRE and ESP are different types of IP traffic (layer 3). WireGuard uses encrypted tunnels by encapsulating IP packets over UDP so it would be a little less obvious. There are VPNs that make all traffic look like SSL traffic but those are generally less secure. You could probably double up and create a separate encapsulated encrypted traffic stream inside the SSL but that’s a shit ton of overhead.
Depending on the VPN type it appears like a completely different type of traffic. GRE and ESP are different types of IP traffic (layer 3). WireGuard uses encrypted tunnels by encapsulating IP packets over UDP so it would be a little less obvious. There are VPNs that make all traffic look like SSL traffic but those are generally less secure. You could probably double up and create a separate encapsulated encrypted traffic stream inside the SSL but that’s a shit ton of overhead.