For anything outside your LAN, 2 nodes must need a negotiator(over internet) to know each other unless the nodes already have public dedicated IPs in which case they can talk to each other securely without the need of a negotiator.