Tailscale
Table of Contents
- Mesh VPN
It uses Wireguard as its encryption backend.
It uses external server hosted by Tailscale to break through NAT layer.
1. STUN
- Session Traversal Utilities for NAT
Global DERP (Designated Encrypted Relay for Packets) servers mediates direct connection between two NAT networks.
UDP packages are sent from A to B and B to A. A's packet is blocked by B's NAT system, but B's packet passes as a response packet to A's packet.