This question already has an answer here:
I need to make sure that one of the apps I use can only use internet traffic that goes through VPN.
How, as a non-corporate user, can I achieve that? Can per-app VPN settings enabled with a custom profile help with that? Is it the best possible way?
My first thoughts are:
MDM profile-defined per-app VPN. If it is a way to go, what are the key pieces of the setup I need? (I want to be sure that profile-defined per-app VPN will help with my problem; also that a manually-created profile will work just as well as a "enterprise tool-generated" one).
Workflow app or a similar tool. Is there any which is able to initiate VPN connection and wait until connection is established?
"Connect on demand" always-on VPN: I tried it, but it allows some of the app's traffic to skip VPN when switching from wifi to mobile data or vice versa, for the periods when VPN is reconnecting. Such non-VPN traffic for the app is what I want to avoid completely.
Of course I'm fine to wait for establishing connection every time I switch to the app if any of the methods require that.