I’m planning to deploy clients behind NAT routers which cannot be configured for portforwarding.
Does ansible have a solution that makes an active connection to the ansible server?
Look at ansible-pull, it can be installed on the clients and they will
pull the plays from the configured repo.