Connection Type¶
The Connect Control Service provides Endpoint connection types for a variety of use cases and networking contexts.
The available options are:
Auto: the Endpoint decides whether a relay is appropriate based on the NAT in use. When adverse NAT conditions are detected, a relay is used to work around them.Direct: outbound traffic from the Endpoint does not go via a relay, unless a peer requires a relay for connectivity.Open Public Port: the Endpoint has a fixed, publicly-accessible port to allow peers to reach it directly, even if a peer usually requires a relay; see How to configure an Open Public Port.UDP Relay: the Endpoint uses a connection relay for all* TAN traffic; useful when the NAT type is known and is unlikely to change.
* Endpoints in UDP Relay mode do not use a connection relay for peers behind the same public IP address as them because their traffic never needs to leave the LAN.
New Endpoints default to the Auto Connection Type. This is the correct
setting for most Endpoints: it finds the best path to use for each peer.
The Connection Type setting can be changed, as described below.
Encrypted data
Your data is not, and can not be, decrypted by a connection relay as it never has the decryption keys.
Configuring Connection Type¶
In the Control Service, navigate to the Settings tab of the Endpoint within your Organisation and click on the Edit Settings button.

Choose an option from the Connection Type drop-down list, then click on the Save button to save the change.
The setting will take effect immediately; there is no need to restart the Endpoint.