140.82.121.6 | api.github.com |
216.239.38.120 | google.com |
Domain fronting was not actually required.
(Only an IP filter, no SNI filter.)
Editing the system hosts file to point Google services to 216.239.38.120 would work.
Downloading files from Google Drive:
curl --connect-to ::216.239.38.120 --ssl-revoke-best-effort \ -L -o champa-client-darwin-amd64 \ "https://drive.usercontent.google.com/download? id=1ROCBSIsnat8uDQSlOFajuW2XAbeqNNZh&export=download&confirm=t"
Limited success with AMP cache proxy.