I haven't tried it yet, but my VPN service provides port forwarding. Forwarding lightning traffic means the network won't know the clearnet IP of the node, but my VPN provider could infer it.