tried bunch of options with similar requirements. surfshark linux app hasn't caused any kernel panics yet which is honestly the bar these days. sad but true