Blocking VPN is easy. You detect a new encrypted connection to a host outside of Russia. Then you connect to the same host yourself and check if it’s a VPN server or not. If you get a VPN handshake, you block all access to such host. Boom! No more VPN.