- No amount of routing/holes in firewalls is going to get around that. -

An http-proxy-server on the router should suffice. the empeg's IP is known and addressable by the proxy. It would require some configuration in the browser though