MySQL: setting up replication from multi-source external sources to a could-based slave

Question

The scenario: a (growing) number of sites, each with a MySQL running as source. Sites cannot accept inbound connections. I need to replicate each of them to