Expect everything going through the great firewall to be slow. Also I wonder if they will allow encrypted connections over a longer period at all if they already run a app firewall.

That's what I'm doing, it's not very slow (or at least I don't really feel the difference)...

I don't think they'll ever block encrypted connections because that would deal a major blow to the foreign companies working here.