IPSEC between OPNsense and pfSense with one side behind Carrier-grade NAT | Hacker News Reader