if you are behind cgnat (both ipv4, ipv6) then vps, have public ipv6 then you can connect via public domain (ddns openwrt) and if you have a public ip, wireguard it is