Are connections from web over TCP or UDP? Push or Pull?

Just curious to know how ST hub relays / captures data from WAN access. I’d assume (because of the constant ping) it’d be using the UDP port it stunned - allowing PUSH’s directly to the public IP+port to the hub… or it’s just constantly pulling from ST cloud / api?