use NAT port forwarding to make the build more resilient