Most of the time, no. The first packet of a given connection will hit a supernode (one of four machines run by ZeroTier) to open up the NAT ports, but after tha

Most of the time, no. The first packet of a given connection will hit a supernode (one of four machines run by ZeroTier) to open up the NAT ports, but after that everything is point to point. Except in the case of an overly restrictive firewall that doesn't allow outgoing UDP on port 9993, in which case every packet is tunneled over port 443 through one of the supernodes. That said, every packet is encrypted with NaCL so that situation is less concerning. Just slower.