Unfortunately downloading over SOCKS proxy also means inability to download from swarms where all peers can't accept an incoming connection, which matters for o

Unfortunately downloading over SOCKS proxy also means inability to download from swarms where all peers can't accept an incoming connection, which matters for obscure torrents. I'd suggest running your VPN-only applications in a separate network namespace https://www.wireguard.com/netns/ https://www.wireguard.com/netns/ . This will also prevent, for example, WebRTC or https://www.theregister.com/2015/11/30/port_fail_vpn/ https://www.theregister.com/2015/11/30/port_fail_vpn/ style leaks as the application won't see other interfaces.