I've been using Http Injector to spoof host
I used Sshssl . com or dynamicssh . com websites to create the ssl/ssh
The packages i've used are mobitel whatsapp, youtube, and facebook packages for the tunneling
So far no issue
Dunno if it's leagal or illegal.