I swear by AirVPN. Not the fastest or fanciest, but they’ve got port forwarding and are run by an activist org; I’ve got a lifetime membership IIRC