[App_rpt-users] VPN for node behind NAT?

[Tom Hayward]

I'd like to hear what solutions people have come up with for placing a
node behind NAT where port forwarding is not available, such as a
cellular CGN, public wifi hotspot, public agency's network controlled
by an IT department, etc. My experience with this is mostly using
RTCMs which work fine behind NAT and can connect out to my Asterisk
instance running in a datacenter. I am trying to substitute a URI and
RPi in this scenario.

Assuming this is a permanent, private link, I think these options are available:
- Set the RPi to connect to the hub on startup. If initiating the
connecting from inside the NAT, I think it will allow traffic to flow
both ways?
- Install an OpenVPN server on the hub and OpenVPN client on the RPi.
Tunnel Asterisk traffic over OpenVPN.
- Reverse SSH tunnel. Set the hub to connect to the node on 127.0.0.2
or whatever I bind the tunnel to.

Has anyone tried any of these options? How did it perform? What other
options do I have? What am I missing?

Tom KD7LXL