VPN-in-a-box
Isolating the network interface provided by VPN software (like OpenVPN or tinc) may be a good idea if you intent to use it to isolate a program to that specific network.
This can somewhat be achieved using a separate user or group, iptables (to mark packets sent by that user …