[Jnr]

Tailscale uses STUN to do hole punching, there is a big chance that nodes would be able to achieve direct connection even if both are behind NAT.