# Latest **URL:** https://openziti.discourse.group/latest.md?page=2 [Latest](https://openziti.discourse.group/latest.md) · [Categories](https://openziti.discourse.group/categories.md) **Page:** 3 --- ## [Account returning HTTP 500 errors](https://openziti.discourse.group/t/account-returning-http-500-errors/6047)
**Author:** [@domsdo1958-source](https://openziti.discourse.group/u/domsdo1958-source)\ **Replies:** 1\ **Last updated:** [September 6, 2026, 6:47am UTC](https://openziti.discourse.group/t/account-returning-http-500-errors/6047 "2026-09-06T06:47:38Z")
Hi, My zrok account has been returning HTTP 500 errors on every account/share operation since this morning (Sep 6, 2026). It was working fine yesterday. Errors seen: zrok share public \ → \[POST /share\]\[500\] share… --- ## [Request failed (500) when releasing environment (DbSX1q-R7j) - Account limit reached](https://openziti.discourse.group/t/request-failed-500-when-releasing-environment-dbsx1q-r7j-account-limit-reached/5957)
**Author:** [@jadieraristizabal](https://openziti.discourse.group/u/jadieraristizabal)\ **Replies:** 3\ **Last updated:** [September 6, 2026, 4:25am UTC](https://openziti.discourse.group/t/request-failed-500-when-releasing-environment-dbsx1q-r7j-account-limit-reached/5957 "2026-09-06T04:25:40Z")
Hi, I am a paying user of the $7/mo zrok plan. I am currently unable to create or delete environments. When I try to delete/release the environment JADIERPC\\jadie@JadierPC (zId: DbSX1q-R7j) from the web console, I get … --- ## [Cannot enable environment (500 Error)](https://openziti.discourse.group/t/cannot-enable-environment-500-error/6045)
**Author:** [@SaiyanK](https://openziti.discourse.group/u/SaiyanK)\ **Replies:** 0\ **Last updated:** [September 6, 2026, 4:16am UTC](https://openziti.discourse.group/t/cannot-enable-environment-500-error/6045 "2026-09-06T04:16:35Z")
$ zrok enable .... the zrok service returned an error: \[POST /enable\]\[500\] enableInternalServerError there was a problem enabling your environment! you are trying to use the zrok service at: https://api-v1.zrok.io y… --- ## [Hosted zrok2 environment cannot create any public share – \[POST /share\]\[500\] shareInternalServerError](https://openziti.discourse.group/t/hosted-zrok2-environment-cannot-create-any-public-share-post-share-500-shareinternalservererror/6044)
**Author:** [@tlaloc2k-ws](https://openziti.discourse.group/u/tlaloc2k-ws)\ **Replies:** 0\ **Last updated:** [September 6, 2026, 2:10am UTC](https://openziti.discourse.group/t/hosted-zrok2-environment-cannot-create-any-public-share-post-share-500-shareinternalservererror/6044 "2026-09-06T02:10:42Z")
Hi, I’m using hosted zrok with zrok2 v2.0.4 \[6ff92039\] on Windows 11. My environment appears healthy for account/config operations, but it cannot create any public share. Environment API endpoint: https://api-v2.zrok… --- ## [Removing Stale Environments](https://openziti.discourse.group/t/removing-stale-environments/6042)
**Author:** [@JT\_Valhalla](https://openziti.discourse.group/u/JT_Valhalla)\ **Replies:** 1\ **Last updated:** [September 5, 2026, 10:18pm UTC](https://openziti.discourse.group/t/removing-stale-environments/6042 "2026-09-05T22:18:56Z")
Hello, I'm a new user and I believe I've created three stale environments. My account is now limited so I can't do anything. Could you release the environments for me? The account name is johnt@valhalla-systems.com I'm… --- ## [ZDEW 2.9.7.2 / 2.11.3.0: OIDC login via external Keycloak fails with 404/405 at "Controller authentication" — works on 2.9.7.1 (controller 2.1.0-pre1)](https://openziti.discourse.group/t/zdew-2-9-7-2-2-11-3-0-oidc-login-via-external-keycloak-fails-with-404-405-at-controller-authentication-works-on-2-9-7-1-controller-2-1-0-pre1/6034)
**Author:** [@humter86](https://openziti.discourse.group/u/humter86)\ **Replies:** 1\ **Last updated:** [September 3, 2026, 5:20pm UTC](https://openziti.discourse.group/t/zdew-2-9-7-2-2-11-3-0-oidc-login-via-external-keycloak-fails-with-404-405-at-controller-authentication-works-on-2-9-7-1-controller-2-1-0-pre1/6034 "2026-09-03T17:20:30Z")
Hello OpenZiti team, First of all, thank you for the great project — we have been running OpenZiti in production for several services and appreciate the stability and design of the overlay. We are writing to report a re… --- ## [Free tier interstitial showing despite verified account with credit card](https://openziti.discourse.group/t/free-tier-interstitial-showing-despite-verified-account-with-credit-card/6030)
**Author:** [@synapsevzla](https://openziti.discourse.group/u/synapsevzla)\ **Replies:** 1\ **Last updated:** [September 3, 2026, 1:17pm UTC](https://openziti.discourse.group/t/free-tier-interstitial-showing-despite-verified-account-with-credit-card/6030 "2026-09-03T13:17:58Z")
Hello support team, I have verified my account by adding a credit card to avoid the free tier limitations, but the interstitial warning/page continues to appear. Could you please check my account status and help me clea… --- ## [Hosted zrok2 enable returning 500 / cannot release shares in API console](https://openziti.discourse.group/t/hosted-zrok2-enable-returning-500-cannot-release-shares-in-api-console/6028)
**Author:** [@steevejfr](https://openziti.discourse.group/u/steevejfr)\ **Replies:** 2\ **Last updated:** [September 1, 2026, 7:26am UTC](https://openziti.discourse.group/t/hosted-zrok2-enable-returning-500-cannot-release-shares-in-api-console/6028 "2026-09-01T07:26:39Z")
Hello, I'm using the hosted zrok service (api-v2.zrok.io) with zrok2 v2.0.4 on Windows 11. My environment is currently stuck and I'm unable to enable or release anything. Symptom 1 — zrok2 enable fails: Running zrok2 e… --- ## [Hosted zrok2 environment stuck – enable and release both return 500](https://openziti.discourse.group/t/hosted-zrok2-environment-stuck-enable-and-release-both-return-500/6027)
**Author:** [@biharkadeepak](https://openziti.discourse.group/u/biharkadeepak)\ **Replies:** 0\ **Last updated:** [August 28, 2026, 8:07am UTC](https://openziti.discourse.group/t/hosted-zrok2-environment-stuck-enable-and-release-both-return-500/6027 "2026-08-28T08:07:42Z")
I am using zrok2 v2.0.4 on Windows 11 with: Local zrok2 status reports that no local environment exists. However, the API console contains a stale environment: Description: MSI\\Deepak@MSI Created: July 14, 2026 Ru… --- ## [HA not working as expected with ext-jwt signer (without JIT enrollment)](https://openziti.discourse.group/t/ha-not-working-as-expected-with-ext-jwt-signer-without-jit-enrollment/5812)
**Author:** [@marratj](https://openziti.discourse.group/u/marratj)\ **Replies:** 32\ **Last updated:** [August 28, 2026, 6:44am UTC](https://openziti.discourse.group/t/ha-not-working-as-expected-with-ext-jwt-signer-without-jit-enrollment/5812 "2026-08-28T06:44:40Z")
I have an 2.0.0-pre12 setup that is configured to use a local Keycloak instance as an external JWT signer without JIT enrollment of external identities. This means I'm pre-creating the identities for users in Ziti with t… --- ## [My hosted zrok v2 account is stuck](https://openziti.discourse.group/t/my-hosted-zrok-v2-account-is-stuck/6026)
**Author:** [@Shishir606](https://openziti.discourse.group/u/Shishir606)\ **Replies:** 0\ **Last updated:** [August 28, 2026, 6:29am UTC](https://openziti.discourse.group/t/my-hosted-zrok-v2-account-is-stuck/6026 "2026-08-28T06:29:58Z")
My hosted zrok v2 account is stuck. POST /share returns: \[500\] shareInternalServerError After disabling, POST /enable returns: \[500\] enableInternalServerError Deleting the environment from the API Console also fails… --- ## [The zrok service returned an error: \[POST /enable\]\[500\] enableInternalServerError](https://openziti.discourse.group/t/the-zrok-service-returned-an-error-post-enable-500-enableinternalservererror/6025)
**Author:** [@Mashalien](https://openziti.discourse.group/u/Mashalien)\ **Replies:** 1\ **Last updated:** [August 28, 2026, 6:06am UTC](https://openziti.discourse.group/t/the-zrok-service-returned-an-error-post-enable-500-enableinternalservererror/6025 "2026-08-28T06:06:29Z")
I recently downloaded Zrok and needed to use the v1 version for Foundry, downloading the 1.1.11 version since that seemed most recent for v1. However, every time I try to enable Zrok, this error comes back: "the zrok se… --- ## [OpenZiti edge router MFA posture nil-pointer panic causing authenticated router DoS](https://openziti.discourse.group/t/openziti-edge-router-mfa-posture-nil-pointer-panic-causing-authenticated-router-dos/6022)
**Author:** [@mike.gorman](https://openziti.discourse.group/u/mike.gorman)\ **Replies:** 0\ **Last updated:** [August 26, 2026, 8:18pm UTC](https://openziti.discourse.group/t/openziti-edge-router-mfa-posture-nil-pointer-panic-causing-authenticated-router-dos/6022 "2026-08-26T20:18:12Z")
Summary The OpenZiti edge router evaluates posture checks locally when an OIDC/JWT-session client dials or binds a service. The router's MFA posture check (router/posture/mfa.go, MfaCheck.Evaluate) reads state.Woken.Ti… --- ## [Unauthenticated Memory Exhaustion via Unbounded Pre-Auth Request Body Buffering](https://openziti.discourse.group/t/unauthenticated-memory-exhaustion-via-unbounded-pre-auth-request-body-buffering/6019)
**Author:** [@mike.gorman](https://openziti.discourse.group/u/mike.gorman)\ **Replies:** 0\ **Last updated:** [August 26, 2026, 7:41pm UTC](https://openziti.discourse.group/t/unauthenticated-memory-exhaustion-via-unbounded-pre-auth-request-body-buffering/6019 "2026-08-26T19:41:27Z")
Summary AppEnv.CreateRequestContext in controller/env/appenv.go calls io.ReadAll(r.Body) to buffer the entire HTTP request body into memory before any authentication or authorization check is performed. This function is … --- ## [Existing Session Remains Valid After Account Is Deactivated in External IdP](https://openziti.discourse.group/t/existing-session-remains-valid-after-account-is-deactivated-in-external-idp/5999)
**Author:** [@tomc](https://openziti.discourse.group/u/tomc)\ **Replies:** 5\ **Last updated:** [August 26, 2026, 7:40pm UTC](https://openziti.discourse.group/t/existing-session-remains-valid-after-account-is-deactivated-in-external-idp/5999 "2026-08-26T19:40:18Z")
I’m testing OpenZiti 2.0.1 with Authentik as the external OIDC identity provider. I authenticated successfully through Authentik and established an OpenZiti session. I then deactivated the corresponding user account in … --- ## [Legacy Enrollment Path Doubles Per-Request Memory Allocation, Amplifying Memory Exhaustion DoS](https://openziti.discourse.group/t/legacy-enrollment-path-doubles-per-request-memory-allocation-amplifying-memory-exhaustion-dos/6018)
**Author:** [@mike.gorman](https://openziti.discourse.group/u/mike.gorman)\ **Replies:** 0\ **Last updated:** [August 26, 2026, 7:38pm UTC](https://openziti.discourse.group/t/legacy-enrollment-path-doubles-per-request-memory-allocation-amplifying-memory-exhaustion-dos/6018 "2026-08-26T19:38:48Z")
Summary The unauthenticated enrollment endpoint (/edge/client/v1/enroll) with legacy MIME types (text/plain, application/pkcs7, application/x-pem-file) allocates the request body twice: once globally in CreateRequestCont… --- ## [Proxmox Backup over Ziti fails on large datasets (HTTP/2.0 connection failed)](https://openziti.discourse.group/t/proxmox-backup-over-ziti-fails-on-large-datasets-http-2-0-connection-failed/5975)
**Author:** [@golden-monkey](https://openziti.discourse.group/u/golden-monkey)\ **Replies:** 10\ **Last updated:** [August 26, 2026, 11:41am UTC](https://openziti.discourse.group/t/proxmox-backup-over-ziti-fails-on-large-datasets-http-2-0-connection-failed/5975 "2026-08-26T11:41:04Z")
Hi community, we are experiencing an issue regarding our remote backups which uses a ziti overlay network to connect the source to our remote backup target. Currently, every scheduled backup we run fails. We are using … --- ## [ZET does not recover after prolonged controller/network outage once API session expires](https://openziti.discourse.group/t/zet-does-not-recover-after-prolonged-controller-network-outage-once-api-session-expires/5993)
**Author:** [@tomc](https://openziti.discourse.group/u/tomc)\ **Replies:** 6\ **Last updated:** [August 25, 2026, 8:47pm UTC](https://openziti.discourse.group/t/zet-does-not-recover-after-prolonged-controller-network-outage-once-api-session-expires/5993 "2026-08-25T20:47:52Z")
I am seeing ziti-edge-tunnel fail to recover after controller and network connectivity are restored following a prolonged outage. A short network interruption appears to be handled normally. The problem occurs when conn… --- ## [Ziti Edge Desktop For Windows Disable PROXY](https://openziti.discourse.group/t/ziti-edge-desktop-for-windows-disable-proxy/6012)
**Author:** [@cao](https://openziti.discourse.group/u/cao)\ **Replies:** 2\ **Last updated:** [August 24, 2026, 3:09pm UTC](https://openziti.discourse.group/t/ziti-edge-desktop-for-windows-disable-proxy/6012 "2026-08-24T15:09:35Z")
I'm using Ziti Edge Desktop for Windows 2.9.5, it works well in my sandbox environment. When I testing ZEDW in a corporate network, it failed to connect to Ziti Controller and Router, after a little bit troubleshooting,… --- ## [Zrok GUI – A Graphical Interface for zrok](https://openziti.discourse.group/t/zrok-gui-a-graphical-interface-for-zrok/6010)
**Author:** [@muratgul](https://openziti.discourse.group/u/muratgul)\ **Replies:** 0\ **Last updated:** [August 15, 2026, 12:46pm UTC](https://openziti.discourse.group/t/zrok-gui-a-graphical-interface-for-zrok/6010 "2026-08-15T12:46:27Z")
Hi everyone, I recently built a small GUI application that makes zrok easier to use without relying entirely on the command line. The goal of the project is to provide a simple graphical interface for managing and usin… --- ## [Browzer - openziti](https://openziti.discourse.group/t/browzer-openziti/5996)
**Author:** [@Sachini](https://openziti.discourse.group/u/Sachini)\ **Replies:** 1\ **Last updated:** [August 11, 2026, 11:26am UTC](https://openziti.discourse.group/t/browzer-openziti/5996 "2026-08-11T11:26:54Z")
Hello Team, Getting this error after SSO login(keycloak) on the browser console. Any idea how to resolve it? Uncaught (in promise) Error: The request could not be completed. The session is not authorized or the credent… --- ## [OpenZiti identity with Entra-signed JWT cannot access resources](https://openziti.discourse.group/t/openziti-identity-with-entra-signed-jwt-cannot-access-resources/5997)
**Author:** [@carol](https://openziti.discourse.group/u/carol)\ **Replies:** 2\ **Last updated:** [August 11, 2026, 9:22am UTC](https://openziti.discourse.group/t/openziti-identity-with-entra-signed-jwt-cannot-access-resources/5997 "2026-08-11T09:22:16Z")
Hello everyone, I’m running OpenZiti, and overall everything is working fine. Last week, I tried to configure network access through identity, but it’s not working as expected. Sometimes I can log in to the UI console… --- ## [Ziti 2.0.2 Availability in Stable Repositories](https://openziti.discourse.group/t/ziti-2-0-2-availability-in-stable-repositories/6001)
**Author:** [@tomc](https://openziti.discourse.group/u/tomc)\ **Replies:** 1\ **Last updated:** [August 11, 2026, 4:20am UTC](https://openziti.discourse.group/t/ziti-2-0-2-availability-in-stable-repositories/6001 "2026-08-11T04:20:17Z")
I noticed that Ziti 2.0.1 is affected by the security issues addressed in Ziti 2.0.2, so upgrading to 2.0.2 appears advisable. However, it looks like 2.0.1 is still the version available from the OpenZiti stable package… --- ## [How Can I View Active Ziti Sessions?](https://openziti.discourse.group/t/how-can-i-view-active-ziti-sessions/5990)
**Author:** [@tomc](https://openziti.discourse.group/u/tomc)\ **Replies:** 4\ **Last updated:** [August 10, 2026, 9:15pm UTC](https://openziti.discourse.group/t/how-can-i-view-active-ziti-sessions/5990 "2026-08-10T21:15:31Z")
Hello, friends! For ziti 2.0.1, I’m having trouble viewing active sessions. Both the Ziti CLI and ZAC return an empty session list, even though ZDEW and ZET appear to be logged in, as indicated by the green status dots … --- ## [Domain Posture Check Failure](https://openziti.discourse.group/t/domain-posture-check-failure/5979)
**Author:** [@cao](https://openziti.discourse.group/u/cao)\ **Replies:** 5\ **Last updated:** [August 7, 2026, 6:59am UTC](https://openziti.discourse.group/t/domain-posture-check-failure/5979 "2026-08-07T06:59:23Z")
I'm running windows Edge Client 2.9.5 to access OpenZiti Overlay Network, it works well. I try to create a Posture Check OS System Check, it works well. I try to create a Posture Check with Domain check, BUT it doesn't… --- ## [Network Proflie of OpenZiti Windows Edge Client](https://openziti.discourse.group/t/network-proflie-of-openziti-windows-edge-client/5977)
**Author:** [@cao](https://openziti.discourse.group/u/cao)\ **Replies:** 3\ **Last updated:** [August 7, 2026, 1:47am UTC](https://openziti.discourse.group/t/network-proflie-of-openziti-windows-edge-client/5977 "2026-08-07T01:47:51Z")
Hi supports, I'm testing OpenZiti with WIndows Edge Client (Tunneler), it works well. I have a quetion on the network interface created by Edge Client, the interface has a Puliic Network profile. Running "Get-NetConnec… --- ## [Correlating OpenZiti Access with Load Balancer/WAF Logs](https://openziti.discourse.group/t/correlating-openziti-access-with-load-balancer-waf-logs/5984)
**Author:** [@tomc](https://openziti.discourse.group/u/tomc)\ **Replies:** 6\ **Last updated:** [August 6, 2026, 4:27pm UTC](https://openziti.discourse.group/t/correlating-openziti-access-with-load-balancer-waf-logs/5984 "2026-08-06T16:27:01Z")
I have an application architecture consisting of: OpenZiti router → load balancer/WAF → web application The load balancer, WAF, and application typically record the Ziti router’s IP address rather than the identity or … --- ## [Yo....just sayin Hi to the NF team](https://openziti.discourse.group/t/yo-just-sayin-hi-to-the-nf-team/5988)
**Author:** [@ojbfive](https://openziti.discourse.group/u/ojbfive)\ **Replies:** 1\ **Last updated:** [August 6, 2026, 1:59pm UTC](https://openziti.discourse.group/t/yo-just-sayin-hi-to-the-nf-team/5988 "2026-08-06T13:59:16Z")
Hey gang....I still got it after 3 years, using OZ 2.0 for multi cloud mgt with Ubuntu VM's. --- ## [\[2 Features\] - Is it possible to enfore MFA 8 hour expiration and Filtering in the Tunneler?](https://openziti.discourse.group/t/2-features-is-it-possible-to-enfore-mfa-8-hour-expiration-and-filtering-in-the-tunneler/5983)
**Author:** [@MacFee](https://openziti.discourse.group/u/MacFee)\ **Replies:** 1\ **Last updated:** [August 6, 2026, 1:49pm UTC](https://openziti.discourse.group/t/2-features-is-it-possible-to-enfore-mfa-8-hour-expiration-and-filtering-in-the-tunneler/5983 "2026-08-06T13:49:46Z")
I have been testing the enforcement of MFA for our MacOS Tunneler and it is working; however, I did want to ask 2 general questions. Is it possible to enforce MFA with a TTL so they have to re-enter their MFA token aga… --- ## [Giant Logs from Ziti](https://openziti.discourse.group/t/giant-logs-from-ziti/5973)
**Author:** [@actieve](https://openziti.discourse.group/u/actieve)\ **Replies:** 8\ **Last updated:** [July 31, 2026, 12:54pm UTC](https://openziti.discourse.group/t/giant-logs-from-ziti/5973 "2026-07-31T12:54:48Z")
I have had this happen before where Ziti will fill my HDD with log files, I caught this one at 7GB. Any idea what causes this, here is the end of the file. um\[2026-07-29T00:33:21.726Z\] INFO ziti-sdk:ziti.c:2192 ve… [Previous page](https://openziti.discourse.group/latest.md?page=1) [Next page](https://openziti.discourse.group/latest.md?page=3)