Set up your own VPN. [1] Downside is that it has to be distributed to nodes you and your friends control and likely pay for. Tinc is also a bit slow. Upside is that it does user-space mesh routing and is very light weight and very network resilient, in that it can route around network issues. To make up for speed one can set up multiple http caches like Squid and configure them to do Squid SSL Bump (MitM cache). I've seen some people maintain docker images for Squid SSL Bump proxies. Just be careful who you decide to peer with as in, are they really friends you can trust. Just one idiot on your network can destroy it and cause legal issues for you.
[1] - https://www.tinc-vpn.org/
You can make them illegal to use, but you can't stop people from using them.