here's a really great article by the people who wrote WireGuard as to why P2P is really hard to do: https://tailscale.com/blog/how-nat-traversal-works/