Creates an encrypted virtual private network directly between the host and client, bypassing local NAT barriers entirely.