CAN bus over the network: a NAT-traversing hub in C11. Devices export their SocketCAN interfaces to a central hub over QUIC with mutual TLS; clients consume them through the hub or peer-to-peer — reachable behind firewalls, encrypted and authenticated.