Why no TLS1.3
OpenSSL is bloated. Maybe try WolfSSL to reduce size
I don't understand what is complex about port forwarding?
You enter an ip address, 2 ports, done.