@rinkside @Da_Gut +1 on Tailscale, which is really Wireguard with good management features. It does an excellent job of traversing evil CGNATs and unusual network configurations, and has support for many platforms. I use the basic (free) tier for to access my lab network, and it works great. I even have it set up on my GL.Inet MT3000 travel router for secure home access on the road.