wg-turn
wg-turn is just a turn daemon for wireguard. If you need more functionality, you can look at cunīcu, netbird, TailScale or other
wg-turn use the mainline DHT to discover the peers endpoint
⚠️ someone in possession of private keys would be able to carry out a man-in-the-middle attack.