How widespread in ziti is the adoption of the Bring Your Favorite Engine (BYFE) concept? I quick review of the go components suggest that it maybe targeted strictly to the clients. ~ Tom

The Go components are generally built to be pluggable, so someone could provide a link implementation or an edge listener which used a different TLS provider than the default. However, no one has done that so far. Our next work in this area will likely be in trying to provide DTLS implementations ra…

It seems if a package links against tlsuv, you get BYFE; otherwise, it is whatever the default is. Go is an interesting case study as third-party dependencies, such as Resty, bring in TLS. ~ Tom

Since the dependency is deep, maybe the better option is GitHub - golang/go at dev.boringcrypto , which maps crypto/* to boringssl.

Seems like a good option to investigate :+1:

How adopted is the BYFE concept?

Building/Development

PhilipGriffiths August 9, 2023, 7:01pm 3

Would this post not be an implementation of BYFE - FIPS Compliance - #3 by ccravens?? I know several users of OpenZiti which have implemented FIPs compliant versions of Ziti which I assumed used BYFE…

Topic		Replies	Views
FIPS Compliance Zitifications	6	615	November 17, 2022
PKCS11 not available Ziti Edge Tunnel	15	342	April 12, 2024
Integrating OpenZiti with a Golang TLS server Building/Development	45	1260	April 26, 2022
Why does the tunneler not support the proxy tunnel mode? Ziti Overlay	12	658	April 4, 2023
Is it possible to bind to service without host config and still have TLS? Uncategorized	3	66	October 6, 2025

How adopted is the BYFE concept?

Related topics