From c646219e48776484a6d32d888c2e5ff522289901 Mon Sep 17 00:00:00 2001
From: Guus Sliepen <guus@tinc-vpn.org>
Date: Fri, 3 Feb 2017 09:10:43 +0100
Subject: [PATCH] Add sentence about UDP hole punching capabilities.

Suggested by Olivier Hault.
---
 index.mdwn | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/index.mdwn b/index.mdwn
index 4cea1e6..3b828b2 100644
--- a/index.mdwn
+++ b/index.mdwn
@@ -37,6 +37,11 @@ other, VPN traffic is always (if possible) sent directly to the
 destination, without going through intermediate hops.
 </dd>
 
+<dt><b>NAT traversal</b></dt>
+<dd>As long as one node in the VPN allows incoming connections on a public IP address (even if it is a dynamic IP address),
+tinc will punch UDP holes through NAT devices, allowing direct communication between peers.
+</dd>
+
 <dt><b>Easily expand your VPN</b></dt>
 <dd>When you want to add nodes to your VPN, all you have to do is add
 an extra configuration file, there is no need to start new daemons
-- 
2.20.1