I think it is legal, and certainly should be, except inasmuch as they manage to force you to agree to a contract that says you agree not to, in which case it’s not exactly illegal but it would be breach of that contract.
Of course, certain corporations and IP industry associations would no doubt love me to be wrong. But I think they should all be abolished, and spanked.
Certainly, the companies who provide international VPN services and highlight the ability to do this as a feature, such as TunnelBear and Opera and the VPN company Opera uses and no doubt many others, seem to think it’s legal enough to include in their business model and advertising, so yeah I think it’s still legal.