# Ziti Overlay **URL:** https://openziti.discourse.group/c/ziti-overlay/8.md?page=2 [Latest](https://openziti.discourse.group/latest.md) · [Categories](https://openziti.discourse.group/categories.md) **Page:** 3 --- ## ["service has no terminators" error using Python SDK](https://openziti.discourse.group/t/service-has-no-terminators-error-using-python-sdk/5131)
**Author:** [@Mathis](https://openziti.discourse.group/u/Mathis)\ **Replies:** 7\ **Last updated:** [September 23, 2025, 6:49am UTC](https://openziti.discourse.group/t/service-has-no-terminators-error-using-python-sdk/5131 "2025-09-23T06:49:36Z")
Hello everyone, I am currently trying to create a Flask host using the python SDK. I've copied the git sample for an easy start, but still can't get a connection going between client and host. The host seems to bind to … --- ## [Does "semantic": "AnyOf" work?](https://openziti.discourse.group/t/does-semantic-anyof-work/5126)
**Author:** [@Rantanplan](https://openziti.discourse.group/u/Rantanplan)\ **Replies:** 2\ **Last updated:** [September 22, 2025, 9:06pm UTC](https://openziti.discourse.group/t/does-semantic-anyof-work/5126 "2025-09-22T21:06:12Z")
My Edge Router Policy has #eu attribute { "name": "ID", "appData": "", "edgeRouterRoles": \[ "#eu" \], "identityRoles": \[ "@ID" \], "semantic": "AnyOf", "tags": { "zrok": "v1.0.4 \[3f5db643\]" }… --- ## [Delay on first request](https://openziti.discourse.group/t/delay-on-first-request/5121)
**Author:** [@Mathis](https://openziti.discourse.group/u/Mathis)\ **Replies:** 6\ **Last updated:** [September 19, 2025, 2:49pm UTC](https://openziti.discourse.group/t/delay-on-first-request/5121 "2025-09-19T14:49:17Z")
Hello everyone, I have a simple setup with a host and client, where the host has a GET route which just returns some text. The client uses the python SDK with monkeypatching, here’s the code : “import os import openzi… --- ## [Private Router settings](https://openziti.discourse.group/t/private-router-settings/4961)
**Author:** [@Crystech](https://openziti.discourse.group/u/Crystech)\ **Replies:** 7\ **Last updated:** [September 3, 2025, 4:29pm UTC](https://openziti.discourse.group/t/private-router-settings/4961 "2025-09-03T16:29:40Z")
I like to ask the community if there’s any specific Private only Router setup (not gateway) but service as host-proxy endpoint I configured a router without listener (it just dial to public router ) and connected. no is… --- ## [Feasability/requirements/questions for deploying openziti on fly.io](https://openziti.discourse.group/t/feasability-requirements-questions-for-deploying-openziti-on-fly-io/5079)
**Author:** [@suhum](https://openziti.discourse.group/u/suhum)\ **Replies:** 1\ **Last updated:** [September 2, 2025, 8:33pm UTC](https://openziti.discourse.group/t/feasability-requirements-questions-for-deploying-openziti-on-fly-io/5079 "2025-09-02T20:33:10Z")
Howdy. I’m looking into using openziti + zrok to allow remote access to some services I run in my homelab. I’d like to deploy the openziti controller/router in a few regions to make it HA and close to the people who tend… --- ## [Setting JWT lifetime](https://openziti.discourse.group/t/setting-jwt-lifetime/5051)
**Author:** [@Eric](https://openziti.discourse.group/u/Eric)\ **Replies:** 21\ **Last updated:** [September 1, 2025, 12:47pm UTC](https://openziti.discourse.group/t/setting-jwt-lifetime/5051 "2025-09-01T12:47:18Z")
Hi Team, I come back to this post because I would like to change the token life time. I saw your explanation and you mentioned that duration can be set on the controller in the yaml setting file. But I don’t see any yam… --- ## [OpenZiti SSH Troubleshooting Report (ssh-to-vps)](https://openziti.discourse.group/t/openziti-ssh-troubleshooting-report-ssh-to-vps/5068)
**Author:** [@relias](https://openziti.discourse.group/u/relias)\ **Replies:** 3\ **Last updated:** [August 31, 2025, 3:35pm UTC](https://openziti.discourse.group/t/openziti-ssh-troubleshooting-report-ssh-to-vps/5068 "2025-08-31T15:35:44Z")
Hi all, I’ve been stuck on this for a while and I really need help figuring out where the issue is. My setup: VPS: Ubuntu 22.04, running OpenZiti v1.6.7 (controller + edge router). MacBook: Ziti Desktop Edge (ide… --- ## [Help with designing/configuring desired overlay](https://openziti.discourse.group/t/help-with-designing-configuring-desired-overlay/5052)
**Author:** [@Eric](https://openziti.discourse.group/u/Eric)\ **Replies:** 7\ **Last updated:** [August 30, 2025, 9:22pm UTC](https://openziti.discourse.group/t/help-with-designing-configuring-desired-overlay/5052 "2025-08-30T21:22:42Z")
Hi Team, As I wrote in a previous poste, the BIND USING EDGE IDENTITY option helped me to move forward, but now that we are planning to build the target organization, I’m a bit lost on the way to achieve it. Could you p… --- ## [Terminators problem](https://openziti.discourse.group/t/terminators-problem/5053)
**Author:** [@voev](https://openziti.discourse.group/u/voev)\ **Replies:** 0\ **Last updated:** [August 25, 2025, 4:04am UTC](https://openziti.discourse.group/t/terminators-problem/5053 "2025-08-25T04:04:38Z")
Hello, I need help with a Ziti cluster. There is a two-node cluster, Ziti version 1.6.7, the controllers and edge routers are behind HAProxy. Everything works quite stably, but there are 2 services where terminators are… --- ## [Failed to send update router interfaces request to controller](https://openziti.discourse.group/t/failed-to-send-update-router-interfaces-request-to-controller/5037)
**Author:** [@Rantanplan](https://openziti.discourse.group/u/Rantanplan)\ **Replies:** 7\ **Last updated:** [August 22, 2025, 10:10am UTC](https://openziti.discourse.group/t/failed-to-send-update-router-interfaces-request-to-controller/5037 "2025-08-22T10:10:03Z")
I have tons of messages on routers Aug 18 20:50:21 ziti\[767\]: {"error":"timeout waiting for message reply: context deadline exceeded","file":"github.com/openziti/ziti/router/interfaces/interfaces.go:155","func":"github… --- ## [Disabling a service/intercept for specific idenities](https://openziti.discourse.group/t/disabling-a-service-intercept-for-specific-idenities/4926)
**Author:** [@aidanhopper](https://openziti.discourse.group/u/aidanhopper)\ **Replies:** 7\ **Last updated:** [August 19, 2025, 6:58pm UTC](https://openziti.discourse.group/t/disabling-a-service-intercept-for-specific-idenities/4926 "2025-08-19T18:58:24Z")
Hello, I’m making a web interface for OpenZiti and I would like to have the ability to enable and disable services for identities. First I tried just removing the role allowing the identity to dial the service, but aft… --- ## [Ziti ha cluster - sdk enabled apps falling off](https://openziti.discourse.group/t/ziti-ha-cluster-sdk-enabled-apps-falling-off/4900)
**Author:** [@strongwazz](https://openziti.discourse.group/u/strongwazz)\ **Replies:** 5\ **Last updated:** [August 15, 2025, 9:39am UTC](https://openziti.discourse.group/t/ziti-ha-cluster-sdk-enabled-apps-falling-off/4900 "2025-08-15T09:39:46Z")
Hiya I have a 3-node HA controller cluster, with 3 edge routers This works brilliantly when working with tunnelers (ZDE etc) When using SDK-enabled/aware apps that host a service, they eventually fall off. For testin… --- ## [WSL SSL certificate problem: unable to get local issuer certificat](https://openziti.discourse.group/t/wsl-ssl-certificate-problem-unable-to-get-local-issuer-certificat/5001)
**Author:** [@brandi](https://openziti.discourse.group/u/brandi)\ **Replies:** 4\ **Last updated:** [August 13, 2025, 6:47pm UTC](https://openziti.discourse.group/t/wsl-ssl-certificate-problem-unable-to-get-local-issuer-certificat/5001 "2025-08-13T18:47:15Z")
Hey, I have set up Openziti for my homelab with: Controller/Public Edge Router on the cloud A SFF running in my home 24/7 with docker (running few containers like Gitea, etc) I’ve successfully managed to configure Zi… --- ## [Is it possible to connect to edge router then controller?](https://openziti.discourse.group/t/is-it-possible-to-connect-to-edge-router-then-controller/5000)
**Author:** [@MoofyWoofy](https://openziti.discourse.group/u/MoofyWoofy)\ **Replies:** 2\ **Last updated:** [August 13, 2025, 12:32pm UTC](https://openziti.discourse.group/t/is-it-possible-to-connect-to-edge-router-then-controller/5000 "2025-08-13T12:32:39Z")
Hello! I have been reading the documentation and watching a little bit on Ziti TV and I just want to say OpenZiti is amazing. I would like to ask if it's possible to use an edge router as a middle man for the controlle… --- ## [Add controller HA k8s guide](https://openziti.discourse.group/t/add-controller-ha-k8s-guide/2967)
**Author:** [@sadath-12](https://openziti.discourse.group/u/sadath-12)\ **Replies:** 2\ **Last updated:** [August 7, 2025, 12:44pm UTC](https://openziti.discourse.group/t/add-controller-ha-k8s-guide/2967 "2025-08-07T12:44:06Z")
Hi , we are done with lot of testing and setup integration with our platform , we are about to go to production . One important piece left is HA . Please provide a k8s helm chart for simplifying HA controller management … --- ## [How to configure ziti groups?](https://openziti.discourse.group/t/how-to-configure-ziti-groups/4949)
**Author:** [@Rantanplan](https://openziti.discourse.group/u/Rantanplan)\ **Replies:** 0\ **Last updated:** [August 6, 2025, 10:35am UTC](https://openziti.discourse.group/t/how-to-configure-ziti-groups/4949 "2025-08-06T10:35:13Z")
Let assume we have the routers : \["xxx106"\]\["xxx173"\]\["xxx189"\]\["xxx209"\]\["xxx51"\] \["yyy161"\]\["yyy221"\]\["yyy223"\]\["yyy236"\]\["yyy29"\]\["yyy3"\]\["yyy7"\]\["yyy76"\]\["yyy89"\] I would like to create two groups: GX and GY. GX … --- ## [Ziti fabric list reports an invalid circuit\_id?](https://openziti.discourse.group/t/ziti-fabric-list-reports-an-invalid-circuit-id/4939)
**Author:** [@Rantanplan](https://openziti.discourse.group/u/Rantanplan)\ **Replies:** 3\ **Last updated:** [August 5, 2025, 10:30pm UTC](https://openziti.discourse.group/t/ziti-fabric-list-reports-an-invalid-circuit-id/4939 "2025-08-05T22:30:16Z")
After rebooting the ziti-controller I observe the following: $ ziti fabric stream events --usage | grep 17pXhmLqsvzJz0vmOFkW8U | jq -c '\[.timestamp,.circuit\_id,.tags.serviceId\]' \["2025-08-04T10:14:10.492986393Z","U1Fk47… --- ## [Changing the router's port](https://openziti.discourse.group/t/changing-the-routers-port/4935)
**Author:** [@Rantanplan](https://openziti.discourse.group/u/Rantanplan)\ **Replies:** 3\ **Last updated:** [August 5, 2025, 10:19pm UTC](https://openziti.discourse.group/t/changing-the-routers-port/4935 "2025-08-05T22:19:29Z")
To change the router port I need to change its config.yml and then restart the router. Unfortunately I need to restart all other routers also. I miss something? --- ## [How to run ziti ops verify traffic?](https://openziti.discourse.group/t/how-to-run-ziti-ops-verify-traffic/4916)
**Author:** [@Rantanplan](https://openziti.discourse.group/u/Rantanplan)\ **Replies:** 1\ **Last updated:** [August 2, 2025, 9:42pm UTC](https://openziti.discourse.group/t/how-to-run-ziti-ops-verify-traffic/4916 "2025-08-02T21:42:26Z")
ziti ops verify traffic has created bind/dial identities but apparently it can not find routers. All my routers have custom roles. There are no router with #all. Saving identity 'default' to .config/ziti/ziti-cli.json… --- ## [OpenZiti Blocking On ISP](https://openziti.discourse.group/t/openziti-blocking-on-isp/4813)
**Author:** [@katlegomoilwa](https://openziti.discourse.group/u/katlegomoilwa)\ **Replies:** 12\ **Last updated:** [August 2, 2025, 9:22pm UTC](https://openziti.discourse.group/t/openziti-blocking-on-isp/4813 "2025-08-02T21:22:50Z")
Hi everyone, I’ve set up OpenZiti locally and it’s working well for most users. However, we’ve noticed that clients on a specific ISP here in Botswana are unable to connect to the overlay network. Has anyone else run i… --- ## [Cannot connect to service](https://openziti.discourse.group/t/cannot-connect-to-service/4915)
**Author:** [@Mathis](https://openziti.discourse.group/u/Mathis)\ **Replies:** 3\ **Last updated:** [July 31, 2025, 2:21pm UTC](https://openziti.discourse.group/t/cannot-connect-to-service/4915 "2025-07-31T14:21:29Z")
Hello everyone, I’ve been struggling with that error for quite some time now and can’t find any solution. I’m hoping someone might be able to help The problem is that we have a server used as a service provider, and we … --- ## [Tunneler issue?](https://openziti.discourse.group/t/tunneler-issue/4901)
**Author:** [@Eric](https://openziti.discourse.group/u/Eric)\ **Replies:** 18\ **Last updated:** [July 31, 2025, 10:15am UTC](https://openziti.discourse.group/t/tunneler-issue/4901 "2025-07-31T10:15:30Z")
Hello Team, I'm facing a strange issue and spent a lof of time finding the cause but I'm stuck now. Using a tunneler of server and client side, it works fine for multiple protocols but not at all for one and I don't kno… --- ## [Fabric Circuits listing in HA mode](https://openziti.discourse.group/t/fabric-circuits-listing-in-ha-mode/4885)
**Author:** [@Crystech](https://openziti.discourse.group/u/Crystech)\ **Replies:** 2\ **Last updated:** [July 23, 2025, 8:28am UTC](https://openziti.discourse.group/t/fabric-circuits-listing-in-ha-mode/4885 "2025-07-23T08:28:51Z")
Dear Team again, I have been aggressively testing HA mode , so far so good Controllers 3 X Voters controllers 1 X follower controllers Authentication Method SSO (via external jwt signer) a couple of Public Edge a… --- ## [Retrieving the dialing identity from ziti](https://openziti.discourse.group/t/retrieving-the-dialing-identity-from-ziti/4858)
**Author:** [@aidanhopper](https://openziti.discourse.group/u/aidanhopper)\ **Replies:** 1\ **Last updated:** [July 16, 2025, 9:13pm UTC](https://openziti.discourse.group/t/retrieving-the-dialing-identity-from-ziti/4858 "2025-07-16T21:13:46Z")
Hi everyone, I'm trying to parse information from the Ziti WebSocket api and I would like to know if theres a way to track what services an identity is dialing. Right now I can track how many dials are happening at any … --- ## [K8S multiple tunnelers load balancing](https://openziti.discourse.group/t/k8s-multiple-tunnelers-load-balancing/4750)
**Author:** [@brandi](https://openziti.discourse.group/u/brandi)\ **Replies:** 3\ **Last updated:** [July 14, 2025, 3:22pm UTC](https://openziti.discourse.group/t/k8s-multiple-tunnelers-load-balancing/4750 "2025-07-14T15:22:08Z")
Hey, I've a controller and public edge router running on the Cloud. I also have a Talos cluster running on my homelab. To access services in my homelab remotely, I've deployed a tunneler Pod in my Talos cluster followi… --- ## [Question around using External JWT signer for apps through SDKs](https://openziti.discourse.group/t/question-around-using-external-jwt-signer-for-apps-through-sdks/4780)
**Author:** [@iprr](https://openziti.discourse.group/u/iprr)\ **Replies:** 3\ **Last updated:** [July 6, 2025, 11:27pm UTC](https://openziti.discourse.group/t/question-around-using-external-jwt-signer-for-apps-through-sdks/4780 "2025-07-06T23:27:29Z")
Hi there, I'm fairly new to concepts around authentication and OIDC in particular, and so I'm looking for help around integrating external JWT signers. I might be completely misunderstanding its purpose so please feel fr… --- ## [OIDC implementation in OpenZiti](https://openziti.discourse.group/t/oidc-implementation-in-openziti/4482)
**Author:** [@B3Rhodes](https://openziti.discourse.group/u/B3Rhodes)\ **Replies:** 10\ **Last updated:** [July 4, 2025, 2:35pm UTC](https://openziti.discourse.group/t/oidc-implementation-in-openziti/4482 "2025-07-04T14:35:55Z")
Hi again everyone. First, let me thank you all for your help on my last post. I've finished configuring most of the Ziti's implementation, and I am now running some tests on the Ziti network. However, I'm having some d… --- ## [Docker Swarm overlay networks (VXLAN) using ziti underlay](https://openziti.discourse.group/t/docker-swarm-overlay-networks-vxlan-using-ziti-underlay/4837)
**Author:** [@FoxxMD](https://openziti.discourse.group/u/FoxxMD)\ **Replies:** 2\ **Last updated:** [July 3, 2025, 1:19pm UTC](https://openziti.discourse.group/t/docker-swarm-overlay-networks-vxlan-using-ziti-underlay/4837 "2025-07-03T13:19:18Z")
I have just stumbled upon openziti and a cursory glance of the docs makes it seem like it may be useful for my networking problem but I'm hoping for a more expert opinion on my specific scenario before I dive into the de… --- ## [OIDC error in ZDE (HA Cluster)](https://openziti.discourse.group/t/oidc-error-in-zde-ha-cluster/4822)
**Author:** [@strongwazz](https://openziti.discourse.group/u/strongwazz)\ **Replies:** 4\ **Last updated:** [July 2, 2025, 1:30pm UTC](https://openziti.discourse.group/t/oidc-error-in-zde-ha-cluster/4822 "2025-07-02T13:30:42Z")
Hiya I have a pretty unremarkable ziti cluster with 3 controllers. I've generated identities, and when I attempt to add these identities to ZDE clients, they hit an OIDC error. I haven't configured OIDC in any way … --- ## [Setting up a simple Service](https://openziti.discourse.group/t/setting-up-a-simple-service/4808)
**Author:** [@discourse.maternal501](https://openziti.discourse.group/u/discourse.maternal501)\ **Replies:** 7\ **Last updated:** [July 1, 2025, 11:27am UTC](https://openziti.discourse.group/t/setting-up-a-simple-service/4808 "2025-07-01T11:27:17Z")
Hey, Ive been playing around with OpenZiti as a replacement for Tailscale and seemed to have gotten the basic network setup. As a first service, I'd like to setup access to my Unraid NAS shares. The controller and router… [Previous page](https://openziti.discourse.group/c/ziti-overlay/8.md?page=1) [Next page](https://openziti.discourse.group/c/ziti-overlay/8.md?page=3)