nat traversal
- #doc-review #network
- https://tailscale.com/blog/how-nat-traversal-works
- based on UDP, need direct socket control (not “standard” UDP)
- can use a “proxy” locally that implements the NAT traversal

- stateful firewalls

- for each incoming packet, we need an outgoing packet initiated by client
- solution is a VPN hub without incoming fw

- but a hub is not what we want, we need direct communication

