added CCB to negotiate connections over WAN and behind NAT