# Ziti Tunnel **URL:** https://openziti.discourse.group/c/tunnelers/ziti-tunnel/17.md [Latest](https://openziti.discourse.group/latest.md) · [Categories](https://openziti.discourse.group/categories.md) --- ## [About the Ziti Tunnel category](https://openziti.discourse.group/t/about-the-ziti-tunnel-category/194)
**Author:** [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\ **Replies:** 0\ **Last updated:** [September 7, 2021, 3:04pm UTC](https://openziti.discourse.group/t/about-the-ziti-tunnel-category/194 "2021-09-07T15:04:37Z")
Post questions here about the ziti-edge-tunnel binary, likely related to linux but not exclusively --- ## [Running ziti-edge-tunnel on openbmc arm7](https://openziti.discourse.group/t/running-ziti-edge-tunnel-on-openbmc-arm7/5679)
**Author:** [@simonhill](https://openziti.discourse.group/u/simonhill)\ **Replies:** 2\ **Last updated:** [March 9, 2026, 12:15pm UTC](https://openziti.discourse.group/t/running-ziti-edge-tunnel-on-openbmc-arm7/5679 "2026-03-09T12:15:55Z")
I am trying to run ziti-edge-tunnel on an arm7 openbmc controller in run-host mode and it just exits with a exitcode of 0 and doesn’t keep running. Please can anyone help me debug this? I’ve included the output and a s… --- ## [Ziti tunnel stopped talking to controller](https://openziti.discourse.group/t/ziti-tunnel-stopped-talking-to-controller/5545)
**Author:** [@BeccaraNZ](https://openziti.discourse.group/u/BeccaraNZ)\ **Replies:** 3\ **Last updated:** [February 7, 2026, 6:27am UTC](https://openziti.discourse.group/t/ziti-tunnel-stopped-talking-to-controller/5545 "2026-02-07T06:27:09Z")
I’ve had an interesting fault occur, we’ve seen issues where routers crash or become unavailable in the past and restarts have fixed things however we’ve run into an issue now with the 1.9.16 tunnelers We’ve been runnin… --- ## [Preserving source IP of TCP connection](https://openziti.discourse.group/t/preserving-source-ip-of-tcp-connection/5334)
**Author:** [@bengcooper](https://openziti.discourse.group/u/bengcooper)\ **Replies:** 4\ **Last updated:** [November 17, 2025, 5:04pm UTC](https://openziti.discourse.group/t/preserving-source-ip-of-tcp-connection/5334 "2025-11-17T17:04:55Z")
I saw the upcoming proxy.v1 config type coming up in v1.7, which inspired me to experiment with creating a reverse proxy using ziti-prox-c to forward traffic do a container running on a destination machine (which is runn… --- ## [CICD, Identity and Enrollment](https://openziti.discourse.group/t/cicd-identity-and-enrollment/4866)
**Author:** [@Robin](https://openziti.discourse.group/u/Robin)\ **Replies:** 9\ **Last updated:** [July 23, 2025, 7:30am UTC](https://openziti.discourse.group/t/cicd-identity-and-enrollment/4866 "2025-07-23T07:30:59Z")
Hi, i would like to use a Ziti Network in my CICD Pipeline. So i create a Container with Ziti Tunneler. But what's with the Identitiy. I tried some ways: I copy the identity File from /opt/openziti/etc/identities but i… --- ## [Tunneler crashes when trying to use ext-jwt-login option](https://openziti.discourse.group/t/tunneler-crashes-when-trying-to-use-ext-jwt-login-option/4722)
**Author:** [@gmat98](https://openziti.discourse.group/u/gmat98)\ **Replies:** 2\ **Last updated:** [June 9, 2025, 8:41pm UTC](https://openziti.discourse.group/t/tunneler-crashes-when-trying-to-use-ext-jwt-login-option/4722 "2025-06-09T20:41:56Z")
Hey, When I try to login using external jwt signer on linux the tunneler crashes. I've tried to the identity with url and also with the network jwt, same error. This is the command I'm trying to run ziti-edge-tunnel e… --- ## [HA ziti1.1.0 ziti-tunnel-sdk-c cannot be enrolled](https://openziti.discourse.group/t/ha-ziti1-1-0-ziti-tunnel-sdk-c-cannot-be-enrolled/2510)
**Author:** [@McGonagall666](https://openziti.discourse.group/u/McGonagall666)\ **Replies:** 1\ **Last updated:** [May 7, 2024, 12:54pm UTC](https://openziti.discourse.group/t/ha-ziti1-1-0-ziti-tunnel-sdk-c-cannot-be-enrolled/2510 "2024-05-07T12:54:55Z")
I used three virtual machines to form a raft cluster. According to the github document configuration, it started normally. ziti agent cluster -i ctrl1 list ╭───────┬───────────────────────────────┬───────┬────────┬────… --- ## [Resource access with Starlink](https://openziti.discourse.group/t/resource-access-with-starlink/1830)
**Author:** [@tgoebel](https://openziti.discourse.group/u/tgoebel)\ **Replies:** 2\ **Last updated:** [November 24, 2023, 3:21pm UTC](https://openziti.discourse.group/t/resource-access-with-starlink/1830 "2023-11-24T15:21:47Z")
Will OpenZiti work for data forwarding and access with resources connected through a Starlink internet connection? Would I be able to use ssh to control the instruments? --- ## [Open firewall (UFW) on Linux host only for traffic from ziti tunnel](https://openziti.discourse.group/t/open-firewall-ufw-on-linux-host-only-for-traffic-from-ziti-tunnel/1512)
**Author:** [@Metz](https://openziti.discourse.group/u/Metz)\ **Replies:** 4\ **Last updated:** [August 16, 2023, 8:39pm UTC](https://openziti.discourse.group/t/open-firewall-ufw-on-linux-host-only-for-traffic-from-ziti-tunnel/1512 "2023-08-16T20:39:31Z")
Hello, I do have a server which is running on the public internet and actual I do only allow ssh incoming traffic from my public source IP. ( sudo ufw allow from {my\_source\_ip} to {my\_server\_ip} port 22 proto tcp comme… --- ## [IPV6 Connection lost on Android when using ZITI Mobile Edge on Android](https://openziti.discourse.group/t/ipv6-connection-lost-on-android-when-using-ziti-mobile-edge-on-android/1298)
**Author:** [@mkuhlmann](https://openziti.discourse.group/u/mkuhlmann)\ **Replies:** 12\ **Last updated:** [July 28, 2023, 7:27am UTC](https://openziti.discourse.group/t/ipv6-connection-lost-on-android-when-using-ziti-mobile-edge-on-android/1298 "2023-07-28T07:27:37Z")
Hi all, when I activate the tunnel in the Ziti Mobile Edge App for Android, it seems that my IPV6 connection is completely lost. Is that expected? Thanks in advance! --- ## [Linux Ziti Tunneller for Ubuntu 22.04 and digitalocean example](https://openziti.discourse.group/t/linux-ziti-tunneller-for-ubuntu-22-04-and-digitalocean-example/1302)
**Author:** [@Nick](https://openziti.discourse.group/u/Nick)\ **Replies:** 28\ **Last updated:** [June 8, 2023, 12:32pm UTC](https://openziti.discourse.group/t/linux-ziti-tunneller-for-ubuntu-22-04-and-digitalocean-example/1302 "2023-06-08T12:32:52Z")
Hi: Currently, I am trying the example in “Digital Ocean → Services” Services | OpenZiti . And, I got stuck on step “3.2.3.3 Register Identities” I have created the 4 VMs: controller, edge router with link listener a… --- ## [Binding a service to multiple hosts](https://openziti.discourse.group/t/binding-a-service-to-multiple-hosts/1053)
**Author:** [@gooseleggs](https://openziti.discourse.group/u/gooseleggs)\ **Replies:** 12\ **Last updated:** [February 27, 2023, 10:08pm UTC](https://openziti.discourse.group/t/binding-a-service-to-multiple-hosts/1053 "2023-02-27T22:08:26Z")
First off - I have given this a go as it appears to make sense in my head, but not when I give it a go. The outcome, is that I will likely have a number of 1-1 mappings of users to their desktop machines at work from th… --- ## [Ziti-tunnel use case](https://openziti.discourse.group/t/ziti-tunnel-use-case/749)
**Author:** [@av-dev](https://openziti.discourse.group/u/av-dev)\ **Replies:** 9\ **Last updated:** [September 15, 2022, 3:21pm UTC](https://openziti.discourse.group/t/ziti-tunnel-use-case/749 "2022-09-15T15:21:39Z")
In our environment we have centos7 installed on 90%+ fleet which has older systemd with no support for systemd-resolved split dns capability needed by ziti-edge-tunnel. So as far as I understand I have 2 options - Dep… --- ## [Failed to resolve ziti-tunnel.resolver.test](https://openziti.discourse.group/t/failed-to-resolve-ziti-tunnel-resolver-test/571)
**Author:** [@bjornrun](https://openziti.discourse.group/u/bjornrun)\ **Replies:** 1\ **Last updated:** [June 12, 2022, 12:11pm UTC](https://openziti.discourse.group/t/failed-to-resolve-ziti-tunnel-resolver-test/571 "2022-06-12T12:11:29Z")
Ubuntu Focal Even when I configure DNS resolve so resolvectl status shows that 127.0.0.1 is first, this error occurs ziti-tunnel run -i http.server.json \[ 0.548\] INFO ziti/ziti-tunnel/cmd/ziti-tunnel/subcmd.run: … --- ## [Getting ziti-edge-tunnel working on RHEL 8](https://openziti.discourse.group/t/getting-ziti-edge-tunnel-working-on-rhel-8/491)
**Author:** [@av-dev](https://openziti.discourse.group/u/av-dev)\ **Replies:** 24\ **Last updated:** [May 16, 2022, 10:51pm UTC](https://openziti.discourse.group/t/getting-ziti-edge-tunnel-working-on-rhel-8/491 "2022-05-16T22:51:21Z")
I am trying to install ziti-edge-tunnel on RHEL8. I followed https://support.netfoundry.io/hc/en-us/articles/360045177311-How-to-Use-the-Linux-Tunneler to install. $ ziti-edge-tunnel version v0.17.35 $ uname -a Linux i… --- ## [Ziti sidecar blocking local k8s traffic](https://openziti.discourse.group/t/ziti-sidecar-blocking-local-k8s-traffic/171)
**Author:** [@modonnell](https://openziti.discourse.group/u/modonnell)\ **Replies:** 8\ **Last updated:** [August 3, 2021, 9:40pm UTC](https://openziti.discourse.group/t/ziti-sidecar-blocking-local-k8s-traffic/171 "2021-08-03T21:40:13Z")
I am sure I am doing something wrong. When I add the ziti-tunnel sidecar my other container in the pod can’t see one of my other microservices in the same namespace. Here is my sidecar definition with the dnsConfig. … --- ## [Ziti tunnel on K8S: Adding jwt via k8s secrets is throwing error](https://openziti.discourse.group/t/ziti-tunnel-on-k8s-adding-jwt-via-k8s-secrets-is-throwing-error/170)
**Author:** [@sameersarkar-tcl](https://openziti.discourse.group/u/sameersarkar-tcl)\ **Replies:** 4\ **Last updated:** [July 13, 2021, 9:42am UTC](https://openziti.discourse.group/t/ziti-tunnel-on-k8s-adding-jwt-via-k8s-secrets-is-throwing-error/170 "2021-07-13T09:42:59Z")
Hi Team, I was following steps as mentioned in Kubernetes Sidecar Client | Ziti. While adding jwt via k8s secrets, it complained like, x509: certificate signed by unknown authority (possibly because of “crypto/rsa: ve… --- ## [Ziti-tunnel-sidecar logging ethzero.ziti.ui](https://openziti.discourse.group/t/ziti-tunnel-sidecar-logging-ethzero-ziti-ui/159)
**Author:** [@modonnell](https://openziti.discourse.group/u/modonnell)\ **Replies:** 15\ **Last updated:** [June 21, 2021, 10:12pm UTC](https://openziti.discourse.group/t/ziti-tunnel-sidecar-logging-ethzero-ziti-ui/159 "2021-06-21T22:12:40Z")
I just setup a ziti-tunnel side-car and it is spewing out the following logs: ziti-tunnel-sidecar-demo-7b8896cc94-sk6m8 testclient curl: (6) Could not resolve host: ethzero.ziti.ui ziti-tunnel-sidecar-demo-7b8896cc94-… --- ## [Ziti-tunnel in linux not reconnecting on network disruption](https://openziti.discourse.group/t/ziti-tunnel-in-linux-not-reconnecting-on-network-disruption/156)
**Author:** [@surekha1723](https://openziti.discourse.group/u/surekha1723)\ **Replies:** 8\ **Last updated:** [June 17, 2021, 1:05pm UTC](https://openziti.discourse.group/t/ziti-tunnel-in-linux-not-reconnecting-on-network-disruption/156 "2021-06-17T13:05:05Z")
I have ziti-tunnel running inside a docker application container .Laptop configured as Endpoint has 2 interfaces wired and wireless. If I disconnect the wired connection, network manager running in the laptop switches to… --- ## [Ziti Tunnel & GW Aggregation of Interfaces - Details Needed](https://openziti.discourse.group/t/ziti-tunnel-gw-aggregation-of-interfaces-details-needed/141)
**Author:** [@anantha](https://openziti.discourse.group/u/anantha)\ **Replies:** 11\ **Last updated:** [June 9, 2021, 12:30am UTC](https://openziti.discourse.group/t/ziti-tunnel-gw-aggregation-of-interfaces-details-needed/141 "2021-06-09T00:30:29Z")
Hi, I get to understand that NF GW and Ziti tunnel at the client end support for Aggregation of Multiple interfaces from different Internet Providers & LTE into a single logical circuit for improving network performance… --- ## [API Client 401 status](https://openziti.discourse.group/t/api-client-401-status/106)
**Author:** [@alexis](https://openziti.discourse.group/u/alexis)\ **Replies:** 8\ **Last updated:** [May 6, 2020, 9:07pm UTC](https://openziti.discourse.group/t/api-client-401-status/106 "2020-05-06T21:07:04Z")
Hello, i made a very basic client for the NF API, it works without any problem when i run this app locally on my computer. As soon as i upload to a EC2 in a AWS VPC, i get a 401 error when i try to authenticate/get toke… --- ## [Ziti-tunneler unable to connect](https://openziti.discourse.group/t/ziti-tunneler-unable-to-connect/104)
**Author:** [@alexis](https://openziti.discourse.group/u/alexis)\ **Replies:** 13\ **Last updated:** [May 6, 2020, 12:36am UTC](https://openziti.discourse.group/t/ziti-tunneler-unable-to-connect/104 "2020-05-06T00:36:40Z")
Hello all, im trying to connect a ziti-tunneler from a debian13 linux, after a successful enroll i want to start the tunneler and im getting this messages \[ 2.052\] INFO(ziti.(\*contextImpl).Authenticate): attempting… --- ## [Tunneler Identity gets its Authenticators Section deleted](https://openziti.discourse.group/t/tunneler-identity-gets-its-authenticators-section-deleted/97)
**Author:** [@dariuszSki](https://openziti.discourse.group/u/dariuszSki)\ **Replies:** 6\ **Last updated:** [March 12, 2020, 6:23pm UTC](https://openziti.discourse.group/t/tunneler-identity-gets-its-authenticators-section-deleted/97 "2020-03-12T18:23:56Z")
v0.9.0 Tunneler When I enroll a tunneler, its Identity configuration in DB looks this: { ‘id’: ‘38d540bd-3bd6-414a-a485-46c7ad24e2f8’, ‘createdAt’: ‘2020-03-11T01:54:17.087617195Z’, ‘updatedAt’: ‘2020-03-11T01:54:1… --- ## [Tunneler 0.9.0 - Error - nil pagination in response to GET /services](https://openziti.discourse.group/t/tunneler-0-9-0-error-nil-pagination-in-response-to-get-services/92)
**Author:** [@dariuszSki](https://openziti.discourse.group/u/dariuszSki)\ **Replies:** 20\ **Last updated:** [February 14, 2020, 8:47pm UTC](https://openziti.discourse.group/t/tunneler-0-9-0-error-nil-pagination-in-response-to-get-services/92 "2020-02-14T20:47:10Z")
I installed v0.9.0 tunneler and getting the following error everytime the service poller runs, I guess (15s): \[ 62.723\] ERROR github.com/netfoundry/ziti-edge/tunnel/intercept.ServicePoller: failed to get ziti service… --- ## [Iptables rules for tunneler](https://openziti.discourse.group/t/iptables-rules-for-tunneler/94)
**Author:** [@dariuszSki](https://openziti.discourse.group/u/dariuszSki)\ **Replies:** 1\ **Last updated:** [February 14, 2020, 4:46pm UTC](https://openziti.discourse.group/t/iptables-rules-for-tunneler/94 "2020-02-14T16:46:55Z")
It looks like the tunneler still adds by default udp and tcp rules for the same port even though the service is configured as TCP. According to the source code, this is no longer hardcoded as it was v0.5 and it is passed… --- ## [Sidecar quickstart deployment invalid](https://openziti.discourse.group/t/sidecar-quickstart-deployment-invalid/70)
**Author:** [@qrkourier](https://openziti.discourse.group/u/qrkourier)\ **Replies:** 7\ **Last updated:** [January 17, 2020, 4:36pm UTC](https://openziti.discourse.group/t/sidecar-quickstart-deployment-invalid/70 "2020-01-17T16:36:23Z")
kubectl won’t apply the ziti-tunnel sidecar deployment as written in the quickstart. I’ll follow on here with examples. --- ## [Tunneler Identity Removal from AppWan Issue](https://openziti.discourse.group/t/tunneler-identity-removal-from-appwan-issue/90)
**Author:** [@dariuszSki](https://openziti.discourse.group/u/dariuszSki)\ **Replies:** 9\ **Last updated:** [January 14, 2020, 5:47pm UTC](https://openziti.discourse.group/t/tunneler-identity-removal-from-appwan-issue/90 "2020-01-14T17:47:47Z")
We came across an issue with tunneler. This is deployed on minimop - Cloud Engineering Platform. The iptable rules don’t get cleaned up when the tunnneler identity is removed from appwan. Also, UDP rules get created aut…