# Building/Development

**URL:** https://openziti.discourse.group/c/building-development/9.md

[Latest](https://openziti.discourse.group/latest.md) · [Categories](https://openziti.discourse.group/categories.md)

---

## [About the Building/Development category](https://openziti.discourse.group/t/about-the-building-development-category/186)

<div class="topic-metadata">

**Author:** [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\
**Replies:** 0

</div>

This category is dedicated to the questions around building one or more of the openziti projects.

---

## [Zrok2-bootstrap.bash parsing of FRONTEND\_TOKEN issue](https://openziti.discourse.group/t/zrok2-bootstrap-bash-parsing-of-frontend-token-issue/6151)

<div class="topic-metadata">

**Author:** [@grivanov](https://openziti.discourse.group/u/grivanov)\
**Replies:** 0\
**Last updated:** [September 30, 2026, 3:30pm UTC](https://openziti.discourse.group/t/zrok2-bootstrap-bash-parsing-of-frontend-token-issue/6151 "2026-09-30T15:30:35Z")

</div>

I'm writing here as per the GitHub notice. The zrok2-bootstrap.bash has a parsing issue on line 781: This parses the output: ╭────────────────┬────────────┬─────────────┬─────────────────┬─────────┬─────────────────…

---

## [Some security fixes & improvements in ziti and ziti-console](https://openziti.discourse.group/t/some-security-fixes-improvements-in-ziti-and-ziti-console/6093)

<div class="topic-metadata">

**Author:** [@dmuensterer](https://openziti.discourse.group/u/dmuensterer)\
**Replies:** 3\
**Last updated:** [September 24, 2026, 12:58am UTC](https://openziti.discourse.group/t/some-security-fixes-improvements-in-ziti-and-ziti-console/6093 "2026-09-24T00:58:39Z")

</div>

Hi! You might have already seen some of the issues I've created in the ziti and ziti-console repo and the references to the security team. I'd love some feedback if such kinds of issues/improvement suggestions are want…

---

## [Data Sync Issues in .NET CRM with API Integration](https://openziti.discourse.group/t/data-sync-issues-in-net-crm-with-api-integration/5810)

<div class="topic-metadata">

**Author:** [@lotixog](https://openziti.discourse.group/u/lotixog)\
**Replies:** 1\
**Last updated:** [May 6, 2026, 4:26pm UTC](https://openziti.discourse.group/t/data-sync-issues-in-net-crm-with-api-integration/5810 "2026-05-06T16:26:36Z")

</div>

Hi everyone, I’m currently working on a CRM system built on .NET, and we’ve started facing some data synchronization issues between internal services and external APIs. The main challenge is that client-related data (l…

---

## [How can I distribute the app outside of Mac App Store？](https://openziti.discourse.group/t/how-can-i-distribute-the-app-outside-of-mac-app-store/5790)

<div class="topic-metadata">

**Author:** [@Rock\_Gu](https://openziti.discourse.group/u/Rock_Gu)\
**Replies:** 1\
**Last updated:** [April 23, 2026, 9:03am UTC](https://openziti.discourse.group/t/how-can-i-distribute-the-app-outside-of-mac-app-store/5790 "2026-04-23T09:03:33Z")

</div>

I want to use Developer ID provisioning profile to distribute Ziti Desktop Edge. But VPN can't start. it has a error when tps.startTunnel(), The VPN session failed because an internal error occurred. I noticed that th…

---

## [Development of microsegmentation with IoT-OpenZiti integration](https://openziti.discourse.group/t/development-of-microsegmentation-with-iot-openziti-integration/5543)

<div class="topic-metadata">

**Author:** [@urbanhuee112](https://openziti.discourse.group/u/urbanhuee112)\
**Replies:** 4\
**Last updated:** [February 16, 2026, 1:00pm UTC](https://openziti.discourse.group/t/development-of-microsegmentation-with-iot-openziti-integration/5543 "2026-02-16T13:00:57Z")

</div>

Hi OpenZiti community, Looking for guidance on using OpenZiti for microsegmentation in an IoT gateway setup. I'm exploring OpenZiti for microsegmentation in an IoT gateway environment and would appreciate some guidance…

---

## [Public IP/FQDN problem](https://openziti.discourse.group/t/public-ip-fqdn-problem/5483)

<div class="topic-metadata">

**Author:** [@cyberpolat](https://openziti.discourse.group/u/cyberpolat)\
**Replies:** 1\
**Last updated:** [January 14, 2026, 2:05pm UTC](https://openziti.discourse.group/t/public-ip-fqdn-problem/5483 "2026-01-14T14:05:10Z")

</div>

Hi everyone, I am a new OpenZiti user and I have a question regarding network accessibility. I successfully deployed an OpenZiti network on an Ubuntu server. During the installation process, I used the local IP address…

---

## [Edge Router "Offline/Unverified" and "Unexpected Error" on Desktop Edge](https://openziti.discourse.group/t/edge-router-offline-unverified-and-unexpected-error-on-desktop-edge/5481)

<div class="topic-metadata">

**Author:** [@cyberpolat](https://openziti.discourse.group/u/cyberpolat)\
**Replies:** 6\
**Last updated:** [January 12, 2026, 2:03pm UTC](https://openziti.discourse.group/t/edge-router-offline-unverified-and-unexpected-error-on-desktop-edge/5481 "2026-01-12T14:03:25Z")

</div>

Hi everyone, I am new to OpenZiti and currently setting up a PoC environment on Ubuntu. I can access the Ziti Admin Console (ZAC) via the web interface, but I am struggling with the following issues: Edge Router Stat…

---

## [OpenAPI Spec Mismatch: serviceDetail.config nullability](https://openziti.discourse.group/t/openapi-spec-mismatch-servicedetail-config-nullability/5457)

<div class="topic-metadata">

**Author:** [@gelaechter](https://openziti.discourse.group/u/gelaechter)\
**Replies:** 4\
**Last updated:** [December 30, 2025, 12:49pm UTC](https://openziti.discourse.group/t/openapi-spec-mismatch-servicedetail-config-nullability/5457 "2025-12-30T12:49:47Z")

</div>

Hello, I believe I have found an issue with your OpenAPI Spec. The config map of a serviceDetail can apparently be null, so i guess x-nullable: true should be added? serviceDetail starts at line 22178 of the Ziti Edge …

---

## [Error httpRequest on ziti](https://openziti.discourse.group/t/error-httprequest-on-ziti/5117)

<div class="topic-metadata">

**Author:** [@dorianEliptec](https://openziti.discourse.group/u/dorianEliptec)\
**Replies:** 8\
**Last updated:** [September 26, 2025, 1:08pm UTC](https://openziti.discourse.group/t/error-httprequest-on-ziti/5117 "2025-09-26T13:08:07Z")

</div>

Hello everyone, I’m a developer and I’ve been running into some issues with my POST requests when using Ziti. I’m working on Electron with JavaScript and have integrated the Ziti SDK. While I have several components in…

---

## [API Authentication for Zitified Apps](https://openziti.discourse.group/t/api-authentication-for-zitified-apps/3585)

<div class="topic-metadata">

**Author:** [@ritzdan](https://openziti.discourse.group/u/ritzdan)\
**Replies:** 4\
**Last updated:** [February 12, 2025, 9:06am UTC](https://openziti.discourse.group/t/api-authentication-for-zitified-apps/3585 "2025-02-12T09:06:57Z")

</div>

I am building a Zitified Flask client app being developed to streamline identity creation & downloading the OTT to the end user device. This is accessing LDAP as a dark ziti service, so the app is already authenticated …

---

## [How to Integrate IOT Devices in the Field](https://openziti.discourse.group/t/how-to-integrate-iot-devices-in-the-field/3909)

<div class="topic-metadata">

**Author:** [@apinohixcorp](https://openziti.discourse.group/u/apinohixcorp)\
**Replies:** 2\
**Last updated:** [February 8, 2025, 4:38pm UTC](https://openziti.discourse.group/t/how-to-integrate-iot-devices-in-the-field/3909 "2025-02-08T16:38:07Z")

</div>

How would you guys recommend integrating IOT devices in the field to communicate with ziti protected services? Essentially what we'd like to do is integrate ESP32 devices using the embedded C sdk, but I haven't been able…

---

## [Local development setup issues](https://openziti.discourse.group/t/local-development-setup-issues/3724)

<div class="topic-metadata">

**Author:** [@AshishNaware](https://openziti.discourse.group/u/AshishNaware)\
**Replies:** 1\
**Last updated:** [January 7, 2025, 12:53pm UTC](https://openziti.discourse.group/t/local-development-setup-issues/3724 "2025-01-07T12:53:32Z")

</div>

Hello team, I need some help in debugging below issue on my local setup. I am new to the ziti world and i was trying to run the dev setup locally to try the product. branch - main commit - bb128596bd20adfe3fd84e5285b9…

---

## [How Can Incorporating Dynamic Attributes Enhance Access Control in Openziti?](https://openziti.discourse.group/t/how-can-incorporating-dynamic-attributes-enhance-access-control-in-openziti/2905)

<div class="topic-metadata">

**Author:** [@Jameshclai](https://openziti.discourse.group/u/Jameshclai)\
**Replies:** 5\
**Last updated:** [August 2, 2024, 1:16pm UTC](https://openziti.discourse.group/t/how-can-incorporating-dynamic-attributes-enhance-access-control-in-openziti/2905 "2024-08-02T13:16:41Z")

</div>

To adhere to the zero-trust principle of 'never trust, continuously verify,' whether for the incorporation of dynamic attributes—such as Authorized time frame, Identity location, and Device compliance status—into autho…

---

## [Have you (or anybody) been considering putting the controller on a blockchain?](https://openziti.discourse.group/t/have-you-or-anybody-been-considering-putting-the-controller-on-a-blockchain/2800)

<div class="topic-metadata">

**Author:** [@buckitup](https://openziti.discourse.group/u/buckitup)\
**Replies:** 4\
**Last updated:** [July 4, 2024, 8:38am UTC](https://openziti.discourse.group/t/have-you-or-anybody-been-considering-putting-the-controller-on-a-blockchain/2800 "2024-07-04T08:38:00Z")

</div>

I familiarize myself with the project for a few days now, It seems everything in it may be distributed pretty much, apart from the controller. So the natural question comes, how complicated is it to implement a controlle…

---

## [How does SSL work in OpenZiti network?](https://openziti.discourse.group/t/how-does-ssl-work-in-openziti-network/2745)

<div class="topic-metadata">

**Author:** [@adithya](https://openziti.discourse.group/u/adithya)\
**Replies:** 8\
**Last updated:** [June 21, 2024, 10:12am UTC](https://openziti.discourse.group/t/how-does-ssl-work-in-openziti-network/2745 "2024-06-21T10:12:35Z")

</div>

I am trying to understand how underlying ziti works technically. I tried looking into the code and understood that the communication between routers happens via channels. I also assume that the communication between the…

---

## [Is it possible to CNAME to the zrok share URL and also use letsencrypt to get TLS support?](https://openziti.discourse.group/t/is-it-possible-to-cname-to-the-zrok-share-url-and-also-use-letsencrypt-to-get-tls-support/2719)

<div class="topic-metadata">

**Author:** [@fedex1](https://openziti.discourse.group/u/fedex1)\
**Replies:** 7\
**Last updated:** [June 17, 2024, 2:05pm UTC](https://openziti.discourse.group/t/is-it-possible-to-cname-to-the-zrok-share-url-and-also-use-letsencrypt-to-get-tls-support/2719 "2024-06-17T14:05:55Z")

</div>

Is it possible to CNAME to the zrok share URL and also use letsencrypt to get TLS support? Basically can this be done? I'd like to hide the ZROK share URL and use my own domain? For example go to NYC New Proposed Prop…

---

## [Separate usage of a CA's pkey from a controller | Feature Request](https://openziti.discourse.group/t/separate-usage-of-a-cas-pkey-from-a-controller-feature-request/2376)

<div class="topic-metadata">

**Author:** [@nenkoru](https://openziti.discourse.group/u/nenkoru)\
**Replies:** 10\
**Last updated:** [May 7, 2024, 8:19pm UTC](https://openziti.discourse.group/t/separate-usage-of-a-cas-pkey-from-a-controller-feature-request/2376 "2024-05-07T20:19:10Z")

</div>

Hey there! So after my journey diving deep into OpenZiti I feel like separating the concern of enrolling edge routers by holding pkey to a trusted CA might benefit in terms of additional transparency of this whole black…

---

## [Can't have API auth](https://openziti.discourse.group/t/cant-have-api-auth/2469)

<div class="topic-metadata">

**Author:** [@ismailbouhlel611](https://openziti.discourse.group/u/ismailbouhlel611)\
**Replies:** 3\
**Last updated:** [April 26, 2024, 5:18pm UTC](https://openziti.discourse.group/t/cant-have-api-auth/2469 "2024-04-26T17:18:28Z")

</div>

Hello openZiti Contributors, Thank you for your incredible work on the OpenZiti! I want to use the openziti's api for a school project and I'm new to OAuth 2.0 and could use some guidance: How do I obtain the Client …

---

## [Are "reserved shares" similar to static IPs?](https://openziti.discourse.group/t/are-reserved-shares-similar-to-static-ips/2456)

<div class="topic-metadata">

**Author:** [@futurist](https://openziti.discourse.group/u/futurist)\
**Replies:** 2\
**Last updated:** [April 21, 2024, 10:51pm UTC](https://openziti.discourse.group/t/are-reserved-shares-similar-to-static-ips/2456 "2024-04-21T22:51:24Z")

</div>

Hi there! I am new to this great tool and ecosystem... I am trying to find out whether I could have a public static IP using Zrok... The option of reserved shares sounds very close to that to me... Am I right to thi…

---

## [Build Error (iOS)](https://openziti.discourse.group/t/build-error-ios/2337)

<div class="topic-metadata">

**Author:** [@mikeshappell](https://openziti.discourse.group/u/mikeshappell)\
**Replies:** 6\
**Last updated:** [March 24, 2024, 10:16am UTC](https://openziti.discourse.group/t/build-error-ios/2337 "2024-03-24T10:16:46Z")

</div>

Good morning everyone. I am guessing that I have done something wrong here, but before I spend a bunch of time trying to figure out what that might be, I thought I would ask. I figure someone else might have done the sa…

---

## [Building simple network from scratch - Help](https://openziti.discourse.group/t/building-simple-network-from-scratch-help/2098)

<div class="topic-metadata">

**Author:** [@Pentagon2442](https://openziti.discourse.group/u/Pentagon2442)\
**Replies:** 15\
**Last updated:** [February 25, 2024, 6:53pm UTC](https://openziti.discourse.group/t/building-simple-network-from-scratch-help/2098 "2024-02-25T18:53:44Z")

</div>

Hello, just starting out with OpenZiti. I spent last days reading and watching videos about it, now I would like to build a simple test lab. Here's my simple set-up: 1 VM with CentOS 7 where I would put my Controller…

---

## [Recommended hypervisor to build a VM network with OpenZiti, Zrok etc](https://openziti.discourse.group/t/recommended-hypervisor-to-build-a-vm-network-with-openziti-zrok-etc/2132)

<div class="topic-metadata">

**Author:** [@SEC](https://openziti.discourse.group/u/SEC)\
**Replies:** 1\
**Last updated:** [February 23, 2024, 12:48pm UTC](https://openziti.discourse.group/t/recommended-hypervisor-to-build-a-vm-network-with-openziti-zrok-etc/2132 "2024-02-23T12:48:56Z")

</div>

Hello, Is there a specific open source hypervisor thats recommended to use to host clusters with openziti project on? like proxmox, opennebula etc. Thanks!

---

## [3rd Party Auto Enrollment](https://openziti.discourse.group/t/3rd-party-auto-enrollment/1993)

<div class="topic-metadata">

**Author:** [@devawasthi](https://openziti.discourse.group/u/devawasthi)\
**Replies:** 4\
**Last updated:** [January 31, 2024, 11:10pm UTC](https://openziti.discourse.group/t/3rd-party-auto-enrollment/1993 "2024-01-31T23:10:25Z")

</div>

Im am trying the 3rd party ca Auto enrollment feature instead of ott, but when i enroll the client it gives the following error -: failed to enroll: expected 1 or more CAs from controller, got 0 Here are the detailed s…

---

## [3rd Party CA - Auto Enrollment](https://openziti.discourse.group/t/3rd-party-ca-auto-enrollment/1984)

<div class="topic-metadata">

**Author:** [@dexter](https://openziti.discourse.group/u/dexter)\
**Replies:** 1\
**Last updated:** [January 14, 2024, 3:44pm UTC](https://openziti.discourse.group/t/3rd-party-ca-auto-enrollment/1984 "2024-01-14T15:44:02Z")

</div>

Hi, I was trying auto enrollment using a third party ca, however i couldnt find any detailed flow of how to proceed with, I have registered a third party ca, pls explain how its different from one time enrollment ( ott)…

---

## [Setting up Gunicorn Flask app to work with openziti](https://openziti.discourse.group/t/setting-up-gunicorn-flask-app-to-work-with-openziti/1752)

<div class="topic-metadata">

**Author:** [@scox](https://openziti.discourse.group/u/scox)\
**Replies:** 3\
**Last updated:** [December 11, 2023, 8:18pm UTC](https://openziti.discourse.group/t/setting-up-gunicorn-flask-app-to-work-with-openziti/1752 "2023-12-11T20:18:03Z")

</div>

I'm trying to get my gunicorn flask app working with openziti. Using your examples as reference I have managed to get the same flask app but using waitress to serve the app to work. However ideally I would like to you us…

---

## [Need Info on the signing.pem and cas.pem file](https://openziti.discourse.group/t/need-info-on-the-signing-pem-and-cas-pem-file/1828)

<div class="topic-metadata">

**Author:** [@devawasthi](https://openziti.discourse.group/u/devawasthi)\
**Replies:** 1\
**Last updated:** [November 24, 2023, 3:27pm UTC](https://openziti.discourse.group/t/need-info-on-the-signing-pem-and-cas-pem-file/1828 "2023-11-24T15:27:33Z")

</div>

I am trying to setup ziti from scratch ( 1 controller , 2 routers (priv/pub) ) and created the pki using the ziti cli. I was parallely looking at the ziti setup that i created using the express install. Root ca, intermed…

---

## [Openziti for real-time code editing](https://openziti.discourse.group/t/openziti-for-real-time-code-editing/1740)

<div class="topic-metadata">

**Author:** [@gaurishhs](https://openziti.discourse.group/u/gaurishhs)\
**Replies:** 1\
**Last updated:** [October 28, 2023, 7:57pm UTC](https://openziti.discourse.group/t/openziti-for-real-time-code-editing/1740 "2023-10-28T19:57:40Z")

</div>

Hi! I just discovered OpenZiti and it looks like an amazing piece of software. I even went through the zrok project which looks fantastic! I'm trying to build a FOSS real-time code-editing plugin for (n)vim and openziti …

---

## [Docker Network Plugin for Ziti](https://openziti.discourse.group/t/docker-network-plugin-for-ziti/1704)

<div class="topic-metadata">

**Author:** [@mytlogos](https://openziti.discourse.group/u/mytlogos)\
**Replies:** 0\
**Last updated:** [October 13, 2023, 6:51pm UTC](https://openziti.discourse.group/t/docker-network-plugin-for-ziti/1704 "2023-10-13T18:51:57Z")

</div>

We can currently enable ziti-unaware service via ziti tunnels either on host or network level (outside of host?). But theoretically, should'nt it be possible to use ziti for docker networks? Docker Networks can be exte…

---

## [Blue not running in Docker Compose Quickstart](https://openziti.discourse.group/t/blue-not-running-in-docker-compose-quickstart/1473)

<div class="topic-metadata">

**Author:** [@bearrito](https://openziti.discourse.group/u/bearrito)\
**Replies:** 9\
**Last updated:** [August 22, 2023, 4:43am UTC](https://openziti.discourse.group/t/blue-not-running-in-docker-compose-quickstart/1473 "2023-08-22T04:43:49Z")

</div>

Hello, I'm attempting to run the Docker Compose quickstart guide. I downloaded both the compose file and .env file. Looking at ziti edge list edge-routers I could see that Blue was missing The logs show ziti-pr…

[Next page](https://openziti.discourse.group/c/building-development/9.md?page=1)
