Little info about my experience with UDP whole punching. Oracle cloud VM behind oracle firewall(single firewall) doesn't connect other nodes if that behind a firewall too. My raspberry pi behind router+ISP firewall doesn't work without UDP whole punching. The summary is, UDP whole punching needed for double firewall & no UDP whole punching for single firewall.