If I use nodes with TCP/IP capabilities, how can these be used through firewall? What is the overall architecture of Node-RED (what is reachable by LAN/WAN/VPN)?