This is partially related to #30579 (closed), we need to add more STUN servers to the proxies as well as the client. I prefer to have an RFC5780 compatible STUN server as the default, but there is also an issue of whether this stun server will be as reliable as the previously used Google one.