I have a VM with wireguard connected to a VPN. And I use proxy tunnels over ssh to route traffic through that VM.