tailscale, openvpn, etc. There are many ways...
Discussion
it's literally impossible to do it without one side having inbound routeable connection, that's just how it is
without universal IPv6 that's gonna continue to be a very common situation
the mobile operators have had plenty of time to get that sorted out, so i call conspiracy and cartel on it