On Linux (not sure if other OSes have this) a more lightweight solution would be to put the VPN in a network namespace; e.g. https://github.com/slingamn/namespaced-openvpn

Also handy if you want to do work stuff on a company VPN without letting the employer see all network access.