The port udp/8443 cannot be proxied through a reverse proxy, it needs to be directly accessible by your clients. Also depending on your networking and plugin configuration, an external STUN server might be used. If you want to make sure that no external resources are being used, set the “ICE Host Override” setting in your Calls plugin configuration to the domainname of your Mattermost server.