Running a Full Node through VPN?
Yes, incoming connections must be allowed through port 8333. If your VPN provider allows port-forwarding, it should be configurable in your account settings.

See: https://bitcoin.org/en/full-node#network-configuration