So i managed to fix this issue i had. i didn’t had ca certs in my machine so i found this artical it i follow the instruction
i had issue with the firewall so i opened TCP port for 22000 to my machine and its worked.
but the question is: isn’t relay show make the first connection to over come the NAT blocking? i mean skype like operation ?