I believe your only option is a VPN, with the addition of UDP proxy running on both ends to make sure that Roon can successfully advertise endpoints etc. There are some amazing people here who are working on this, but in your particular situation with VPN restrictions I highly doubt it’ll work.