Connecting remotely using two NAT configurations
Connecting remotely using two NAT configurations
The VPN routes all traffic or just the traffic going to the server? You added your server to ZeroToRing and joined the same network on your phone. You accessed the services using the ZeroToRing IP, which means you controlled access for specific clients rather than routing everything through the network. Yes, you're correct—only certain clients should be able to reach the server, not all traffic.
Yes, OP could host an OpenVPN server on a VPS and redirect traffic through specific ports to connect to a VPN client. I discovered this guide here: https://superuser.com/questions/927060/o...-to-client
You might configure the server as a VPN client and adjust the policies so that outgoing connections bypass the VPN while only incoming data flows through it. This can be achieved by restricting access to the VPN subnet and routing the rest via the CGNATed network.
It's possible to configure a path on the VPN server that directs all traffic through a single client. For instance: a laptop connected to public Wi-Fi → VPN Server → client within the local network → other devices on the same network.