# Support **URL:** https://openziti.discourse.group/c/support/6.md?page=2 [Latest](https://openziti.discourse.group/latest.md) · [Categories](https://openziti.discourse.group/categories.md) **Page:** 3 --- ## [Ziti Router Log token is unverifiable error while executing keyfunc: public key not found](https://openziti.discourse.group/t/ziti-router-log-token-is-unverifiable-error-while-executing-keyfunc-public-key-not-found/5447)
**Author:** [@Tetrusp](https://openziti.discourse.group/u/Tetrusp)\ **Replies:** 4\ **Last updated:** [December 30, 2025, 3:09pm UTC](https://openziti.discourse.group/t/ziti-router-log-token-is-unverifiable-error-while-executing-keyfunc-public-key-not-found/5447 "2025-12-30T15:09:13Z")
Hi, I hope to find everyone well. Over the weekend my ziti network is refusing to route anyone’s traffic. When checking the logs on the public router I see this {"error":"token is unverifiable: error while executing k… --- ## [Token is malformed when attempting to start router](https://openziti.discourse.group/t/token-is-malformed-when-attempting-to-start-router/5452)
**Author:** [@jang](https://openziti.discourse.group/u/jang)\ **Replies:** 1\ **Last updated:** [December 27, 2025, 1:17pm UTC](https://openziti.discourse.group/t/token-is-malformed-when-attempting-to-start-router/5452 "2025-12-27T13:17:56Z")
Hello, similar to Ziti-Router Deployment Error - #2 by TheLumberjack I’m having an issue trying to spin up an edge router with the error token is malformed: could not base64 decode header: illegal base64 data at input by… --- ## [External JWT Signer with Authentik](https://openziti.discourse.group/t/external-jwt-signer-with-authentik/5441)
**Author:** [@astro](https://openziti.discourse.group/u/astro)\ **Replies:** 3\ **Last updated:** [December 17, 2025, 11:15pm UTC](https://openziti.discourse.group/t/external-jwt-signer-with-authentik/5441 "2025-12-17T23:15:11Z")
Hey, I’m having trouble setting up an external JWT Signer with Authentik. I was wondering if anyone was willing to share his configuration, to see if I’m missing anything in mine… Here’s my setup right now: { "\_link… --- ## [Error accessing service](https://openziti.discourse.group/t/error-accessing-service/5437)
**Author:** [@ziti\_user](https://openziti.discourse.group/u/ziti_user)\ **Replies:** 2\ **Last updated:** [December 17, 2025, 3:52pm UTC](https://openziti.discourse.group/t/error-accessing-service/5437 "2025-12-17T15:52:19Z")
Hi, I have 3 edge routers set up each with a test service (HTTP). All of them are deployed via docker compose. I can access 2 of the services fine via the Ziti Edge Client on Mac without issue. But for the 3rd I see the … --- ## [Self-hosted Anytype over openziti](https://openziti.discourse.group/t/self-hosted-anytype-over-openziti/5415)
**Author:** [@rand](https://openziti.discourse.group/u/rand)\ **Replies:** 3\ **Last updated:** [December 13, 2025, 4:42pm UTC](https://openziti.discourse.group/t/self-hosted-anytype-over-openziti/5415 "2025-12-13T16:42:32Z")
Hello community! I’ve successfully installed openziti network and it’s working great with web-services. Recently I’ve tried to install self-hosted Anytype server and it also works fine in my local network. But it doesn’… --- ## [Use public CA server certificates for controller and router](https://openziti.discourse.group/t/use-public-ca-server-certificates-for-controller-and-router/5416)
**Author:** [@ffaraone](https://openziti.discourse.group/u/ffaraone)\ **Replies:** 2\ **Last updated:** [December 11, 2025, 7:27pm UTC](https://openziti.discourse.group/t/use-public-ca-server-certificates-for-controller-and-router/5416 "2025-12-11T19:27:21Z")
Hi, we are deploying a self hosted ziti network to connect our platform with its extensions. Extensions are web application (rest apis) exposed on the ziti network and we use zrok frontend to route call to the right ex… --- ## [Enrolling MFA TOTP from ZDEW (Clustered controllers)](https://openziti.discourse.group/t/enrolling-mfa-totp-from-zdew-clustered-controllers/5413)
**Author:** [@montwepa](https://openziti.discourse.group/u/montwepa)\ **Replies:** 0\ **Last updated:** [December 8, 2025, 12:13pm UTC](https://openziti.discourse.group/t/enrolling-mfa-totp-from-zdew-clustered-controllers/5413 "2025-12-08T12:13:45Z")
Hi guys, Been working with clustered controller setup and noticed a same bug I encountered before Basically when I create a new Auth Policy and give it TOTP Required, I'm unable to enroll that identity, I never get the… --- ## [Active Directory and DNS](https://openziti.discourse.group/t/active-directory-and-dns/5391)
**Author:** [@Krishopper](https://openziti.discourse.group/u/Krishopper)\ **Replies:** 4\ **Last updated:** [December 3, 2025, 3:48pm UTC](https://openziti.discourse.group/t/active-directory-and-dns/5391 "2025-12-03T15:48:43Z")
I went through and setup resources from this post: Conneting Remote Endpoints with a On-Prem AD - #6 by emoscardini Things were working great until I was troubleshooting why machines are not enrolling with Entra and Int… --- ## [I want to create lab for ZTNA using open ziti, the environment are kubernetes in docker desktop Windows](https://openziti.discourse.group/t/i-want-to-create-lab-for-ztna-using-open-ziti-the-environment-are-kubernetes-in-docker-desktop-windows/5356)
**Author:** [@akbarmavs](https://openziti.discourse.group/u/akbarmavs)\ **Replies:** 7\ **Last updated:** [December 2, 2025, 1:37pm UTC](https://openziti.discourse.group/t/i-want-to-create-lab-for-ztna-using-open-ziti-the-environment-are-kubernetes-in-docker-desktop-windows/5356 "2025-12-02T13:37:56Z")
Hi, i want to create lab for ZTNA using openziti, where the environment are in windows 11, using docker desktop and kubernetes, but i seems like can’t do the installation for openziti, it always error when i want to crea… --- ## [PiKVM access with zrok](https://openziti.discourse.group/t/pikvm-access-with-zrok/3681)
**Author:** [@peter.luster164](https://openziti.discourse.group/u/peter.luster164)\ **Replies:** 11\ **Last updated:** [November 30, 2025, 7:04pm UTC](https://openziti.discourse.group/t/pikvm-access-with-zrok/3681 "2025-11-30T19:04:23Z")
Hey there First off: Thank you very much for all the work that led to OpenZiti and zrok. It's amazing to have the ability to use such things. Even more amazing that it's transparent and open-source! To the topic: I'm c… --- ## [Install openziti](https://openziti.discourse.group/t/install-openziti/5372)
**Author:** [@rlsoares86](https://openziti.discourse.group/u/rlsoares86)\ **Replies:** 4\ **Last updated:** [November 28, 2025, 1:52pm UTC](https://openziti.discourse.group/t/install-openziti/5372 "2025-11-28T13:52:20Z")
Hello, my name is Rafael, I'm Brazilian and I'm not fluent in English, so I apologize, as it's translated. I learned about OpenZiti and would like to implement it, but I'm having a lot of difficulty setting up the envir… --- ## [Boltdb edge snapshot failed - error 500](https://openziti.discourse.group/t/boltdb-edge-snapshot-failed-error-500/5358)
**Author:** [@Tetrusp](https://openziti.discourse.group/u/Tetrusp)\ **Replies:** 4\ **Last updated:** [November 27, 2025, 8:56pm UTC](https://openziti.discourse.group/t/boltdb-edge-snapshot-failed-error-500/5358 "2025-11-27T20:56:38Z")
Hi all, I am encountering an issue with snapshotting the boltdb on controller v 1.6.6. error: error updating database/snapshot instance in Ziti Edge Controller at \`\`https://\/edge/management/v1\`\`. Status code… --- ## [SSO with Ziti Desktop Fails – TLS Handshake Issue and Certificate Configuration](https://openziti.discourse.group/t/sso-with-ziti-desktop-fails-tls-handshake-issue-and-certificate-configuration/5344)
**Author:** [@NullZiti](https://openziti.discourse.group/u/NullZiti)\ **Replies:** 6\ **Last updated:** [November 27, 2025, 12:37pm UTC](https://openziti.discourse.group/t/sso-with-ziti-desktop-fails-tls-handshake-issue-and-certificate-configuration/5344 "2025-11-27T12:37:39Z")
Hi, I'm using Controller v1.7.2 and the Ziti Desktop Client for macOS v2.52. I'm trying to connect my identity using the "with URL" feature and SSO, but unfortunately, the attempt fails with the following error: ‘TLS H… --- ## [What to use on a server?](https://openziti.discourse.group/t/what-to-use-on-a-server/5370)
**Author:** [@Krishopper](https://openziti.discourse.group/u/Krishopper)\ **Replies:** 1\ **Last updated:** [November 25, 2025, 7:25pm UTC](https://openziti.discourse.group/t/what-to-use-on-a-server/5370 "2025-11-25T19:25:06Z")
Given the issues and comments in Multi-router setup dropping circuits under load - #4 by plorenz , what would be the recommended software to install on a server? I am going to try deploying this out more widely to serve… --- ## [Multi-router setup dropping circuits under load](https://openziti.discourse.group/t/multi-router-setup-dropping-circuits-under-load/5263)
**Author:** [@Krishopper](https://openziti.discourse.group/u/Krishopper)\ **Replies:** 7\ **Last updated:** [November 17, 2025, 5:54pm UTC](https://openziti.discourse.group/t/multi-router-setup-dropping-circuits-under-load/5263 "2025-11-17T17:54:03Z")
Hi! I’m using OpenZiti to secure connections between devices across my home and cloud environments. One of the protected services is Frigate (for my video camera system). Right now, this setup is in my home lab, where … --- ## [Issue with DNS Interception — Traffic Not Routing Through AD DNS](https://openziti.discourse.group/t/issue-with-dns-interception-traffic-not-routing-through-ad-dns/5281)
**Author:** [@anshjoshi](https://openziti.discourse.group/u/anshjoshi)\ **Replies:** 44\ **Last updated:** [November 17, 2025, 9:03am UTC](https://openziti.discourse.group/t/issue-with-dns-interception-traffic-not-routing-through-ad-dns/5281 "2025-11-17T09:03:45Z")
Hi OpenZiti Support Team, I’m currently deploying OpenZiti over a subnet in AWS and encountering an issue with DNS resolution. Here’s the setup: VPC Subnet: 10.0.0.0/16 AD DNS Server: 10.0.0.2 (within the same VPC) C… --- ## [Trouble setting up a Ziti Ethernet Gateway using ZFW and ZET](https://openziti.discourse.group/t/trouble-setting-up-a-ziti-ethernet-gateway-using-zfw-and-zet/5292)
**Author:** [@gelaechter](https://openziti.discourse.group/u/gelaechter)\ **Replies:** 2\ **Last updated:** [November 16, 2025, 9:26am UTC](https://openziti.discourse.group/t/trouble-setting-up-a-ziti-ethernet-gateway-using-zfw-and-zet/5292 "2025-11-16T09:26:02Z")
Hello, I am currently trying to set up the Ziti Firewall together with a Ziti Edge Tunnel on a Linux router board with two Ethernet ports. I followed most of the Zero Trust IoT Wifi-Gateway guide, as that seems to most… --- ## [Controller Clustering configuration](https://openziti.discourse.group/t/controller-clustering-configuration/5325)
**Author:** [@montwepa](https://openziti.discourse.group/u/montwepa)\ **Replies:** 1\ **Last updated:** [November 13, 2025, 12:53am UTC](https://openziti.discourse.group/t/controller-clustering-configuration/5325 "2025-11-13T00:53:22Z")
Hey guys, Been working with controller clustering lately and had some trouble getting the first node up and running. In the end it started working when the controller was first run with: ziti controller run controller.… --- ## [Controller And Router Upgrades Causing Connectivity Issues](https://openziti.discourse.group/t/controller-and-router-upgrades-causing-connectivity-issues/5267)
**Author:** [@thedarkula](https://openziti.discourse.group/u/thedarkula)\ **Replies:** 19\ **Last updated:** [November 3, 2025, 6:26pm UTC](https://openziti.discourse.group/t/controller-and-router-upgrades-causing-connectivity-issues/5267 "2025-11-03T18:26:24Z")
When upgrading from controller version 1.6.5 to 1.7.0 and router version 1.6.7 to 1.7.0, I am having connectivity issues. Controller logs: {"file":"github.com/openziti/ziti/controller/network/fault.go:32","func":"githu… --- ## [Edge-oidc URL order](https://openziti.discourse.group/t/edge-oidc-url-order/5279)
**Author:** [@marvkis](https://openziti.discourse.group/u/marvkis)\ **Replies:** 13\ **Last updated:** [November 3, 2025, 4:39pm UTC](https://openziti.discourse.group/t/edge-oidc-url-order/5279 "2025-11-03T16:39:06Z")
Hi, I'm currently updating my infrastructure to the latest versions of OpenZITI (1.7.1) and Linux Tunnelers. However, I've noticed that I can only use client versions up to 1.7.14. From version 1.7.15 onwards, the foll… --- ## [How to for self hosting behind NAT?](https://openziti.discourse.group/t/how-to-for-self-hosting-behind-nat/5255)
**Author:** [@ZerotrustExplorer](https://openziti.discourse.group/u/ZerotrustExplorer)\ **Replies:** 24\ **Last updated:** [October 30, 2025, 2:59pm UTC](https://openziti.discourse.group/t/how-to-for-self-hosting-behind-nat/5255 "2025-10-30T14:59:16Z")
Hello, I’m currently using opnsense and wireguard for routing and VPN. Am looking into trying out this new Zero Trust way. So far I managed to install it using the ‘Local with Docker’, have the ZAC working but on attem… --- ## [I cant access the deployed Web-App even with a Enrolled device](https://openziti.discourse.group/t/i-cant-access-the-deployed-web-app-even-with-a-enrolled-device/5229)
**Author:** [@anshjoshi](https://openziti.discourse.group/u/anshjoshi)\ **Replies:** 18\ **Last updated:** [October 30, 2025, 12:49pm UTC](https://openziti.discourse.group/t/i-cant-access-the-deployed-web-app-even-with-a-enrolled-device/5229 "2025-10-30T12:49:12Z")
I am unable to access the web application that is under OpenZiti, despite my device being enrolled, while other enrolled devices can access the app without issue. What could be causing this access problem? While the ide… --- ## [Help connecting React frontend to Go backend behind OpenZiti network](https://openziti.discourse.group/t/help-connecting-react-frontend-to-go-backend-behind-openziti-network/5257)
**Author:** [@mann1996](https://openziti.discourse.group/u/mann1996)\ **Replies:** 3\ **Last updated:** [October 29, 2025, 6:47am UTC](https://openziti.discourse.group/t/help-connecting-react-frontend-to-go-backend-behind-openziti-network/5257 "2025-10-29T06:47:13Z")
Hey everyone :waving\_hand: I’m trying to integrate OpenZiti into my app setup and could use some guidance. Current setup: Backend: Golang Frontend: ReactJS Ziti network is already running in Docker Created … --- ## [Accessing DNS-Over-HTTPS On Android Through Ziti Fails](https://openziti.discourse.group/t/accessing-dns-over-https-on-android-through-ziti-fails/3870)
**Author:** [@thedarkula](https://openziti.discourse.group/u/thedarkula)\ **Replies:** 15\ **Last updated:** [October 23, 2025, 11:57am UTC](https://openziti.discourse.group/t/accessing-dns-over-https-on-android-through-ziti-fails/3870 "2025-10-23T11:57:32Z")
Stemming from other threads, the scenario is this: I have a DOH DNS server running behind ziti. If I try to access this on LAN/Wifi with ziti enabled, Android says that it cannot connect for a brief moment with, "Priva… --- ## [External IdP refresh token](https://openziti.discourse.group/t/external-idp-refresh-token/5258)
**Author:** [@montwepa](https://openziti.discourse.group/u/montwepa)\ **Replies:** 3\ **Last updated:** [October 22, 2025, 10:02am UTC](https://openziti.discourse.group/t/external-idp-refresh-token/5258 "2025-10-22T10:02:02Z")
Hey! I've been testing the By Url functionality in ZDEW and it's been great! I noticed a few things which I wanted to clarify if they should be happening or not. I'm assuming that after authenticating with my external… --- ## [Resolve terminator from identity](https://openziti.discourse.group/t/resolve-terminator-from-identity/5227)
**Author:** [@ffaraone](https://openziti.discourse.group/u/ffaraone)\ **Replies:** 4\ **Last updated:** [October 14, 2025, 4:44pm UTC](https://openziti.discourse.group/t/resolve-terminator-from-identity/5227 "2025-10-14T16:44:53Z")
I have an HTTP service bound to the network with multiple terminators (multiple processes using the same identity and multiple hosts, each with its own identity). I need to either connect to the service or to one of the… --- ## [How to put whole servers / a subnet behind OpenZiti so I don’t have to publish every app/port](https://openziti.discourse.group/t/how-to-put-whole-servers-a-subnet-behind-openziti-so-i-don-t-have-to-publish-every-app-port/5220)
**Author:** [@anshjoshi](https://openziti.discourse.group/u/anshjoshi)\ **Replies:** 4\ **Last updated:** [October 14, 2025, 8:03am UTC](https://openziti.discourse.group/t/how-to-put-whole-servers-a-subnet-behind-openziti-so-i-don-t-have-to-publish-every-app-port/5220 "2025-10-14T08:03:04Z")
Context I run a private network with 5–10 servers. Each server runs 2–3 web apps in Docker on various ports (e.g. 3000, 8080, 5601, etc.). Today I publish apps one-by-one to OpenZiti (create a service per app + … --- ## [Unable to login to ZAC using Entra (Ext-JWT-Signer)](https://openziti.discourse.group/t/unable-to-login-to-zac-using-entra-ext-jwt-signer/5217)
**Author:** [@NullZiti](https://openziti.discourse.group/u/NullZiti)\ **Replies:** 7\ **Last updated:** [October 9, 2025, 9:45pm UTC](https://openziti.discourse.group/t/unable-to-login-to-zac-using-entra-ext-jwt-signer/5217 "2025-10-09T21:45:47Z")
Hi guys, I am new to OpenZiti and so far it looks promsing. Controller: v1.6.7 ZAC: 3.12.5 While trying to connect to ZAC to our SSO solution (Entra), everything in the configuration looks perfect but I am unable to … --- ## [Web App Not Reachable Using FQDN in OpenZiti Docker Deployment](https://openziti.discourse.group/t/web-app-not-reachable-using-fqdn-in-openziti-docker-deployment/5164)
**Author:** [@anshjoshi](https://openziti.discourse.group/u/anshjoshi)\ **Replies:** 8\ **Last updated:** [October 8, 2025, 5:12am UTC](https://openziti.discourse.group/t/web-app-not-reachable-using-fqdn-in-openziti-docker-deployment/5164 "2025-10-08T05:12:55Z")
Hello, We are working on implementing OpenZiti for our Web application. At this stage, we are setting up the environment on a local test server using OpenZiti with Docker. Following the documentation, we successfully de… --- ## [Enrolling MFA TOTP from ZDEW](https://openziti.discourse.group/t/enrolling-mfa-totp-from-zdew/5166)
**Author:** [@montwepa](https://openziti.discourse.group/u/montwepa)\ **Replies:** 7\ **Last updated:** [October 1, 2025, 4:55pm UTC](https://openziti.discourse.group/t/enrolling-mfa-totp-from-zdew/5166 "2025-10-01T16:55:35Z")
Hi! Trying to test the MFA TOTP so I set up a new auth policy as such: { "name": "TOTP MFA ", "primary": { "cert": { "allowExpiredCerts": true, "allowed": true }, "extJwt": { "allowed"… [Previous page](https://openziti.discourse.group/c/support/6.md?page=1) [Next page](https://openziti.discourse.group/c/support/6.md?page=3)