Based on the diagram you provided, unless you have admin access to the ‘Housing Cooperative Network’ router, you do not manage your own firewall router, effectively, and neither a direct connection or VPN would work, period.
You cannot get any traffic over any ports above and beyond those that are allowed by that device. Not to digress, but even if you had control of that router/firewall, having your own router/firewall connected to theirs makes things more complicated, such that something like a VPN would potentially not work.
In order to connect to a device on your network, you would need two things in that HCN router:
a) A NAT (Network Address Translation) Rule in the HCN router, to direct traffic from the external IP address of the router/firewall to your internal IP address (specifically to the IP address of your web server).
Not to digress but you would also need a second NAT rule in your OWN router/firewall…a static IP address and possibly a static route as well……
b) A firewall rule to open the port or ports needed for inbound communication in that HCN router.
While it *MAY* be possible to reconfigure just about any application to use port 1080 which is open, this won’t help because without a NAT rule, traffic will not goto your server/camera. It is also likely that if there is a socks server there, a nat rule is already defined to direct port 1080 traffic to it.
A VPN of any sort would not help, because you still need inbound ports opened on the firewall, and a NAT rule to route traffic to the internal IP address of any VPN device or server you setup. (and then those settings would have to be applied to your own router, as well, plus some special settings to allow VPN traffic to pass-through your router).
I cannot think of a way to make this work on a phone, but if your ‘life depended’ on getting access to this, then there would be ways to ‘tunnel’ a remote-control connection from a PC, but that’s somewhat complicated and involved.
A small complicating factor is that even if you could make all this work, if the HCN router uses a dynamic IP address, you would need to setup a dynamic DNS client on your LAN, outside your firewall so that you would have a DNS name to connect to from the outside.
