Nice!
Ya, the proxy via port forwarding is probably the easy route but the API may allow me to script it. The routers all call home via HTTPS and can then get some commands or scripting changes back.