How to set up access to the VPN client from the outside?

Question

linux

Situation: there is a device (Raspberry Pi) in some network. On it, on port 8080, a node.js server is running, through which hardware pins are controlled. You need to get access from the outside to this device. The option to assign a static IP address and forward ports is not available due to the lack of access to the router. But there is a dedicated server (separate from this entire network) on which it is possible to raise a VPN server. Question: Does the VPN server have a "port forwarding" function like routers? Those. is it possible to assign a static IP to the raspberry in the VPN network and forward ports so that when entering http://xxx.xxx.xxx.xxx:8080/(where xxx.xxx.xxx.xxx is the IP address of the dedicated server) the request goes to Raspberry? What type of VPN (L2TP, PPTP, OpenVPN) to use for this? How to set it up?
PS if there are other options - offer

Answer 1

Yes, that's possible.
You can use any VPN - you can use Softether or OpenVPN (Google is bursting with instructions for VPN settings).
On the server, forward the port to the static ip Raspberry in the tunnel (NAT or proxy through nginx). Don't forget to make sure that your web server will listen on the ip.

Answer 2

I would put an OpenVPN server on a static IP on the Internet. Raspberry Pi OpenVPN client. Would rather set up as a client. I would configure iptables for the necessary portforwarding, or I would enable routing and announce the address of the Raspberry Pi to the VPN server, and from there to the clients that will connect to it in order to access the Raspberry Pi. Or http directly to the public interface as shown in your diagram.