A thorough explanation on how NAT traversal works from the good folk at Tailscale.