renstur@coopnet:~/blog$ ls -lt ./topics/stun/
stun/
-
My NetBird proxy relayed everything because of a Docker hairpin
My self-hosted NetBird proxy in Docker relayed everything. Its WireGuard port was random, and STUN on the same host handed back the Docker bridge address. On v0.82.0, pinning NB_PROXY_WG_PORT and setting NB_PROXY_EXTERNAL_IP_MAP to the public IP got it direct.