Something that I usually forgotten is that cgnats are only there for ipv4. Running your server in ipv6 is almost a safe bet to have good connectivity.

And you know, these days getting a real ipv4 is more expensive than running in ipv6