Since the filter is IP-based, it could be bypassed using CDNs that share IPs between customers. (e.g. [Fastly](https://docs.fastly.com/en/guides/working-with-cname-records-and-your-dns-provider#tls-enabled-hostnames)) One possible solution could be sniproxy: https://github.com/atenart/sniproxy
Since the filter is IP-based, it could be bypassed using CDNs that share IPs between customers. (e.g. Fastly)
One possible solution could be sniproxy: https://github.com/atenart/sniproxy