Correct, I wrote "without additional software". A proxy is additional software.
Discussion
NWS main components
Entry node: It forwards tcp packets to the exit node using a SOCKS proxy and creates encrypted events for the public key of the exit node.
Exit node: It is a TCP reverse proxy that listens for incoming Nostr subscriptions and forwards the payload to the designated backend service.

nostr:note1jaclnk5n5xf4fvnzuectlqtf57t30xkmv7kn8gx8rzya3nftr95q8qrhju