It does a few techniques depending on the type of network and security obstacles. They posted an article on it that’s interesting.

I’d also check out pangolin or headscale like others recommeded though since you’re already looking to self-host.

Until you’re left with choosing between an abandoned open source version and an up to date closed source blob.