Replicating WD2go's functionality on hardware under my control

Ok, that only answers the question partly. Would I absolutely need a publicly-reachable system to relay OpenVPN? 

What would be the correct way to make it work without a 3rd party?