When you have a large network you might see too many open connections at times, mainly during the peer updates. This is mainly caused by endpoint detection on netclient.
Endpoint detection allows the netclient to check if fellow peers in the network can reach over their private addresses, so instead of using the peer's public endpoint, the netclient will automatically switch to the private address/ local address of the peer to communicate. During this process, netclient will try to check connectivity over the private addresses of the peers during which you will see a lot of open connections, but they are all closed by netclient immediately.
In future releases, we looking to provide an option to disable auto endpoint detection and also improve the endpoint detection logic which help resolve this issue. stay tuned :)