can netmaker try udp punching first, but fallback to relay if failed?