Am I understanding correct that this is where STUN comes in? Also: if 2 nodes behind NAT need connection, would that mean that they need a third node which is not behind NAT and this 3rd node is then the relaying node?