How to run ziti ops verify traffic?

Ziti Overlay
1

ziti ops verify traffic has created bind/dial identities but apparently it can not find routers.

All my routers have custom roles. There are no router with #all.

Saving identity 'default' to .config/ziti/ziti-cli.json
INFO    generating P-384 EC key                      
INFO    generating P-384 EC key                      
INFO    waiting 10s for terminator for service: 2025-07-31-1428.traffic 
INFO    successfully bound service: 2025-07-31-1428.traffic. 

INFO    Server is listening for a connection and will exit when one is received. 
WARNING failure creating Bind session to service 2025-07-31-1428.traffic  error="error for request T86.RHFAB: NO_EDGE_ROUTERS_AVAILABLE: No edge routers are assigned and online to handle the requested connection" errorType="*rest_util.APIFormattedError"
WARNING failure creating Bind session to service 2025-07-31-1428.traffic  error="error for request veVJdHFAB: NO_EDGE_ROUTERS_AVAILABLE: No edge routers are assigned and online to handle the requested connection" errorType="*rest_util.APIFormattedError"
WARNING failure creating Bind session to service 2025-07-31-1428.traffic  error="error for request C0q.duv6B: NO_EDGE_ROUTERS_AVAILABLE: No edge routers are assigned and online to handle the requested connection" errorType="*rest_util.APIFormattedError"
ERROR   failed to create bind session for service 0xc001454fc0  error="error for request C0q.duv6B: NO_EDGE_ROUTERS_AVAILABLE: No edge routers are assigned and online to handle the requested connection"
WARNING failure creating Bind session to service 2025-07-31-1428.traffic  error="error for request r0j.RuFA3: NO_EDGE_ROUTERS_AVAILABLE: No edge routers are assigned and online to handle the requested connection" errorType="*rest_util.APIFormattedError"
WARNING failure creating Bind session to service 2025-07-31-1428.traffic  error="error for request -sL.RHFA3: NO_EDGE_ROUTERS_AVAILABLE: No edge routers are assigned and online to handle the requested connection" errorType="*rest_util.APIFormattedError"
WARNING failure creating Bind session to service 2025-07-31-1428.traffic  error="error for request TKQJRHv63: NO_EDGE_ROUTERS_AVAILABLE: No edge routers are assigned and online to handle the requested connection" errorType="*rest_util.APIFormattedError"
ERROR   failed to create bind session for service 0xc001454fc0  error="error for request TKQJRHv63: NO_EDGE_ROUTERS_AVAILABLE: No edge routers are assigned and online to handle the requested connection"
WARNING failure creating Bind session to service 2025-07-31-1428.traffic  errorType="*rest_util.APIFormattedError" error="error for request VZ9.duFAB: NO_EDGE_ROUTERS_AVAILABLE: No edge routers are assigned and online to handle the requested connection"
WARNING failure creating Bind session to service 2025-07-31-1428.traffic  errorType="*rest_util.APIFormattedError" error="error for request ucCJdHv6B: NO_EDGE_ROUTERS_AVAILABLE: No edge routers are assigned and online to handle the requested connection"
WARNING failure creating Bind session to service 2025-07-31-1428.traffic  error="error for request FnCJdHv63: NO_EDGE_ROUTERS_AVAILABLE: No edge routers are assigned and online to handle the requested connection" errorType="*rest_util.APIFormattedError"
FATAL   terminator not found for service: 2025-07-31-1428.traffic
2

Thanks, it should probably check/add a policy specifically to avoid that. I filed an issue ziti ops verify traffic should add dial and bind policies · Issue #3195 · openziti/ziti · GitHub

In the meantime, you would have to make your own policy and you’ll have to use the --prefix to force the name of the generated identity.

Example:

ziti ops verify traffic --mode server --password $ZITI_PWD --prefix exampleprefix

Then you can see the generated identity will be named:

ziti edge list identities 'name contains "exampleprefix"'
╭────────────┬──────────────────────┬─────────┬───────────────────────────────┬─────────────╮
│ ID         │ NAME                 │ TYPE    │ ATTRIBUTES                    │ AUTH-POLICY │
├────────────┼──────────────────────┼─────────┼───────────────────────────────┼─────────────┤
│ SIFd8AMvs3 │ exampleprefix.server │ Default │ exampleprefix.traffic.binders │ Default     │
╰────────────┴──────────────────────┴─────────┴───────────────────────────────┴─────────────╯
results: 1-1 of 1

You would make policies for the attributes that will be generated: exampleprefix.traffic.binders and exampleprefix.traffic.dialers and I believe it’ll work