It's hard to tell right away, you need to study the issue in more detail

In principle, you can use this option

I don't think this is the best solution in this situation, there are alternatives

In my opinion, this area is quite difficult for processing inophrams, so first of all it is necessary to pay attention to the additional study of the field of knowledge. In addition, I would first appreciate whether it is possible not to perform such a system from scratch and use ready-made solutions as I did for how to enable always-on VPN on an iPhone or iPad. After all, this greatly makes it possible to fulfill the order and reduce costs.