Looking for a solution to get around T-Mobile Home Internet 464XLAT

Everything at my home seems to work very well over T-Mobile Home internet, including VPNs. The only exception is that Smartlink does not work. I am looking at two VPN approaches:

Option 1) (OpenVPN and CloudConnexa) build a layer 3 VPN to tunnel from the home network to a cloud service that to provide internet access for the flex radio to get around the T-Mobile network. I anticipate then registering the radio with Smartlink through the cloud IP gateway and then SmartSDR on IOS would discover the radio IP address via Smartlink. I am assuming Smartlink would provide authentication and be acting very much as a DDNS to locate the radio. Does this approach sound plausible? Is this how Smartlink works?

Option 2) build a VPN for the home network with a VPN client installed on the IOS device. If I build a Layer 2 VPN, the flex radio and and SmartSDR IOS client will appear as if they are on the same network and SmartSDR should be able to receive the directed broadcast from the radio and communicate directly to the radio. However I might only be able to build a Layer 3 VPN and my understanding is that the flex radio broadcast messages will not traverse a Layer 3 network. So this leads me to ask how is the broadcast handled with Smartlink?

Is there information in the Flex Radio API that I have not located that describes how the broadcast packets are handled for a Smartlink connection?

I appreciate any information or guidance. I am interested in finding a remote connection solution and also in learning the networking details required to acheive a stable solution.

Thank You,

Randy Nash, AG4Q