Oh are we talking about this?
Using an intermediary server to help two peers discover each other’s public-facing IP addresses and establish a direct connection.
Discussion
Is that how it works? I actually don't know, but that's what Tailscale does, but just for my personal VPN
Not 100% sure but I think so