Russia and China uses DPI, although they often use relatively simple heuristics (like matching a SNI in the beginning of a TLS session).