Comment by Muromec

>and then port-knock and form a direct connection to each other, perfectly encrypted.

so... ICE/TURN/STUN ? Sorry I forgot which one of them actually works, but they do work