[anti-censorship-team] configure router NAT for snowflake proxy