Hey there - First, just want to say I love the project . Of the zero trust implementations I've been looking into so far OpenZiti holds the most promise for me!
I wanted to ask if there are any plans for implementing p2p connections between clients - my main use case for this for this would be game streaming which is quite sensitive to latency so would want to avoid the relay.
Hi @Zizo47, welcome to the community and to OpenZiti (and zrok/BrowZer)!
There are "plans" for it, yes. There's been work done to implement DTLS and though it 'works', it's not been released yet so ymmv on that. The project has numerous other priorities going on at the moment, so it's hard to know when we'll get back to it but that work has definitely been, and continues to be "on the radar".
So "stay tuned in" is the best I can give you.
Happy to hear you're enjoying the project. We enjoy hearing how people are or will use the project. If When you end up implementing OpenZiti, let us know and show it off!
If I might throw a challenge at you.... I know latency is a major issue for certain classes of applications (like a game) but I'd be REALLY interested to know if you actually benefit from going directly to a client in a "p2P/stun" type way. (i assume you don't mean TURN, since really OpenZiti is already very TURN-like) Once the connection is established through the overlay, it's often pretty fast.
I'd be really interested to know how much better in a REAL WORLD scenario it is to do "direct" dial.
Anyway, welcome again to the community, I'm excited to see how you use OpenZiti!
Thanks for the quick response, you're correct it's mainly the STUN protocol that I'm asking about. To be honest the only other concern I had with the relay was the cost of VPS traffic but after a bit of shopping around it doesn't seem like that'll be a limitation (e.g. Oracle free tier is 10TB/month).
I'll give it a shot and see if the latency is workable, thanks again