The server that acts as the control plane needs to have full access to the outside internet. You can’t do NAT hole-punching through STUN if you are yourself beh

The server that acts as the control plane needs to have full access to the outside internet. You can’t do NAT hole-punching through STUN if you are yourself behind a NAT. (There is Headscale though)