Try Wireguard on port 4500; this is usually allowed by any firewall/filter that allows ipsec.