SSH and HTTP to a Raspberry Pi Behind CG-Nat

Thanks for the guide.

Cloudflare provides a free reverse tunnel service. Here is their guide:

https://developers.cloudflare.com/cloudflare-one/tutorials/s...

The end of the guide explains how to configure the .ssh/config client with the ProxyCommand to popup a browser on the client with your choice of identity provider. I have cloudflare email me an OTP before the default SSH terminal connects

https://developers.cloudflare.com/cloudflare-one/tutorials/s...

I prefer Tailscale or Zerotier for that purpose. Tailscale for application where Layer 3 is sufficient and Zerotier where I want Layer 2 communication (think of it as an internet-wide network switch).