A method is performed by a user device for data inspection. A virtual private network (VPN) component of the device receives data traffic and routes it without encryption as a client to or from a destination server as a virtual private network server. The VPN component operates as a connection traffic forwarding bi-directional pipeline with traffic identification and as a connection traffic forwarding bi-directional pipeline with usage accounting, and as a connection traffic forwarding bi-directional pipeline with traffic manipulation.