I prefer to deploy services behind firewalls to limit the attack surface exposure, and was wondering how Hyvor-relay would be handling it if at all?
It would not work behind a NAT firewall. It automates IP registration and routing, and expects public IPv4s to be assigned to the server’s network interface.