Hack the Route Start free Open app Encryption and trust
VPN
Packets wrapped, encrypted, in UDP to a VPN server, which unwraps them on the far side.
A split tunnel carries only some networks (the office); a full tunnel carries everything, except the tunnel's own packets to the server. The local network sees only encrypted UDP to one address: it still learns that you use a VPN, when and how much. A full tunnel should fail closed, and carry DNS too.