Most use OpenVPN and tunnel all traffic over SSLed TCP. So your traffic goes out to an endpoint server run by the proxy company, and gets dumped onto the public net at that point.