I remember 15 years or so; a friend and I figured out that DNS got through my friends cellular connection even though the data limit were reached. We tested and set up a socks-over-dns-proxy back then and it worked! We loled and then never did anything more than that unfortunately (or it depends, we´d most likely be detected if we continued to use that, eh, solution).