I just point an A record in my domain at the public IP I get from my ISP. It's not technically static, but it changes rarely enough that it doesn't bother me. A

I just point an A record in my domain at the public IP I get from my ISP. It's not technically static, but it changes rarely enough that it doesn't bother me. And since I use Route 53 for DNS I can (one day) use their API to automate the process of updating the A record if the IP changes. No VPN tunnel or anything at the moment. I just forward the port from the edge IP in to the server running Mosquitto. I use OpenWRT running on a TP-Link AC1900 for my networking "stuff". That's a change I just made, moving away from an older Netgear router. One nice thing about OpenWRT is that it is, as I understand it, fairly straightforward to configure OpenVPN, so I may implement a VPN for access to my home network sometime soon.