You could look into the concept of ‘DMZ Host’ … a machine placed in this slot gets exposed directly to all incoming traffic…and negates the requirement to port forward.
I’m doing this with my lowly 2 core netcomm as a last resort to receive chunks without --home-network, alas I had many peers but zero data.
So I continue with DMZ Host, but with --home-network …this, together with disabling logging gets me 50 nodes (thin client) whilst maintaining stable internet/ Kayo (sports streaming) on a 20Mbs uplink.
End of month I upgrade to a massive 40mbs uplink…so more headroom.