PhilipLGriffiths88

You could use zrok.io, protected by the 'front door' feature being released today. Then you do not need users to have VPN tunnels, no need to port forward, easily accessible by anyone who is authenticated.

You could use OpenZiti instead. This replaces OpenZiti/ZeroTier, implements strong zero trust principles for the highest security, and even allows you to embed the overlay directly into you game/app using an SDK. If you prefer to share publically, you can use zrok.io, zrok.ia Ngrok replacement for public sharing (incl. TCP/UDP tunnels) which is built on top of Ziti.

Twingate does a better implementation of zero trust principles incl. least-privilege, microsegmentation, etc.

A colleague wrote this - https://blog.openziti.io/set-up-a-secure-multiplayer-minecraft-server

While very very cool, it's not open-source if you depend on CloudFlare for SSE & SASE... why not use FOSS alternatives such as zrok.io for public access (behind pass/user name/0Auth) and OpenZiti for VPN alternative?

zrok.io using the free SaaS together with 0Auth - https://blog.openziti.io/the-zrok-oauth-public-frontend

You could also use zrok.io. It's an open source alternative which can be self-hosted or has a free SaaS. It also includes cool features like 'private sharing' (which means both sides can be private with no inbound ports). I work on the parent project.

It's not free, though, at least $20/year on pro. Why not just pick a Ngrok alternative which can provide a fixed IP - https://github.com/anderspitman/awesome-tunneling

I was going to share the same link but you beat me :D

I work on one mentioned, zrok.io which is both open source and has a free SaaS.