external clients are not peer-to-peer, and route via an "ingress server", but it makes it easy to integrate machines that do not support our client