Catch-all HTTPS service

1

Hello there,

I'm trying to create a catch-all HTTPS service in my OpenZiti network. The idea would be for it to be similar to the "Exit node" Tailscale's feature. Basically, one identity that had access to this service would have all of their outbound HTTPS traffic proxied through the router that had a terminator for that service. I tried to create the service like this:

image
image1128×603 75.6 KB

image
image1113×989 100 KB

image
image1116×801 73.2 KB

But it didn't really work, even though a terminator was created for that service.

Am I missing something?

Thank you

2

Hi, I have faced the same use case. I use k8s. And I just created ziti-service for the ingress controller. And other Ziti services bind to that ingress.

3

I've found the issue. Even though ZAC says "enter values separated with a comma", I've entered the allowed address "0.0.0.0/0" and typed space. That resulted in the route being recognized as "0.0.0.0/0 " with a trailing space.

4

Thanks @Pehesi97 - filed space ends up in intercept config · Issue #695 · openziti/ziti-console · GitHub to track that

1 Like