Poor man's VPN (pay for only what you need)
I've generally considered an SSH tunnel as a poor man's VPN.
If you're going to the effort to spinup a machine, and use SSH anyway, i find it much easier to use `ssh user@server.com -D 4444` then I can set my browser's proxy settings to use localhost:4444 as a SOCKS5 proxy.
For those apps that don't have native proxy support, I use proxychains to force them over a proxy connection.Ofcourse this is only useful for a single user, and for devices that can use ssh and proxies.