Zyxel firewalls (USG FLEX, ATP, USG) offer a freely configurable client for any DynDNS2 provider via the "User customize" DDNS provider. With DNS Beacon your firewall stays reachable under a permanent hostname even when your WAN IP changes. Here's how to set it up.
Configuration → System → DDNS
Pick "User customize" as the DDNS Provider. Zyxel substitutes <domain> with the Domain Name and <ipaddr> with the WAN IP; Username and Password are sent as authentication to /nic/update. The trailing "?" in the URL is required.
Create a free DNS Beacon account, add a hostname and generate an API key — then come back and finish the setup above.
Create free account