a direct p2p link reveals your ip to your peer. a turn relay hides it: your peer then only sees the relay's address. you need a turn account for this.