I consider my threats to be my wifi connection and my ISP. I have a VPS, which I trust as my "starting point", that caps only bandwidth so there's no overages.

I consider my threats to be my wifi connection and my ISP. I have a VPS, which I trust as my "starting point", that caps only bandwidth so there's no overages. I use OpenSSH as SOCKS5 proxy because I already use ssh and DNS goes over the proxy. I think ssh may limit the number of open connections because I sometimes need to close tabs to continue surfing. My set up looks like this: ssh -fCND 1080 proxy-server socks5://127.0.0.1:1080 export SOCKS_SERVER=127.0.0.1:1080 When I'm connected to a device that doesn't give me a routable address, I'll use a ssh jump. ssh -fCND 1080 -J jump-server proxy-server This isn't a VPN but it's equivalent for my usage. I'm waiting for Wireguard to mature in Chromebook / Android. I want to try it out.