I finally got it working... I had to disable "Promiscuous mode" on WAN for NDProxy setup.
Only one ping at 170ms, so all is well.
Code Select
Ping statistics for 2607:f8b0:400a:806::200e:
Packets: Sent = 1000, Received = 1000, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 2ms, Maximum = 170ms, Average = 2ms
Only one ping at 170ms, so all is well.