01 /Salamander hides the whole packet
Salamander obfuscation XORs every byte of the QUIC packet, including the QUIC Initial that carries the TLS ClientHello. That means the SNI is not on the wire at all, and a censor's deep packet inspection sees random noise instead of a QUIC long-header or a recognizable VPN handshake. For DPI the SNI value does not even matter, because it is obfuscated.