Miners are required to have a public IP address and a properly configured firewall to make all things work properly. But sometimes it is not possible due to either security, privacy or provider limitations. This also includes miners behind the NAT.
To be able to work with these miners a Hub can be configured as a gateway.
Note: we assume that it is possible to build a private network between Hub and miners.