Links to articles for setting up a relay or VPN to bypass CGNAT?

Yes I seen QNAP and Synolgoy have this type of functionality with their private access tunnels that they create for remote access that requires no ports open. Here is a a rough diagram of what I am thinking of doing: