Linux ziti edge tunnel loses connectivity

Tunneler Apps Ziti Edge Tunnel
1

I recently incorporated openziti in my home network, loving it so far! I do have an issue with my Linux ziti edge tunnelers, running on ubuntu. They all intermittently lose connection, and I have to go in and manually restart it, which fixes it (temporarily). In the logs the following blocks keeps repeating every 5 seconds:

Jan 03 11:14:00 host ziti-edge-tunnel[293]: (293)[   146540.321]   ERROR tlsuv:http.c:91 http[ziti.mydomain.com:443]: connection error before active request could complete -4095 (end of file)
Jan 03 11:14:00 host ziti-edge-tunnel[293]: (293)[   146540.321]    WARN ziti-sdk:ziti_ctrl.c:177 ctrl_resp_cb() ctrl[https://ziti.mydomain.com:443] request[/external-jwt-signers?limit=25&offset=0] failed: -4095(end of file)
Jan 03 11:14:00 host ziti-edge-tunnel[293]: (293)[   146540.321]    WARN ziti-sdk:ziti.c:652 ext_jwt_singers_cb() ztx[1] failed to get external auth providers: end of file
Jan 03 11:14:00 host ziti-edge-tunnel[293]: (293)[   146540.321]   ERROR tlsuv:http.c:91 http[ziti.mydomain.com:443]: connection error before active request could complete -4095 (end of file)
Jan 03 11:14:00 host ziti-edge-tunnel[293]: (293)[   146540.321]    WARN ziti-sdk:ziti_ctrl.c:177 ctrl_resp_cb() ctrl[https://ziti.mydomain.com:443] request[/version] failed: -4095(end of file)
Jan 03 11:14:00 host ziti-edge-tunnel[293]: (293)[   146540.321]    INFO ziti-sdk:ziti_ctrl.c:180 ctrl_resp_cb() ctrl[https://ziti.mydomain.com:443] attempting to switch endpoint
Jan 03 11:14:00 host ziti-edge-tunnel[293]: (293)[   146540.321]    WARN ziti-sdk:ziti_ctrl.c:604 ctrl_next_ep() ctrl[https://ziti.mydomain.com:443] no controllers are online
Jan 03 11:14:00 host ziti-edge-tunnel[293]: (293)[   146540.321]    WARN ziti-sdk:ziti_ctrl.c:336 internal_version_cb() ctrl[https://ziti.mydomain.com:443] CONTROLLER_UNAVAILABLE(end of file)
Jan 03 11:14:00 host ziti-edge-tunnel[293]: (293)[   146540.321]    WARN ziti-sdk:ziti.c:2036 version_pre_auth_cb() ztx[1] failed to get controller version: CONTROLLER_UNAVAILABLE/end of file
Jan 03 11:14:00 host ziti-edge-tunnel[293]: (293)[   146540.322]   ERROR tlsuv:http.c:354 http[ziti.mydomain.com:443]: connection failed: operation canceled
Jan 03 11:14:00 host ziti-edge-tunnel[293]: (293)[   146540.322]   ERROR tlsuv:http.c:354 http[ziti.mydomain.com:443]: connection failed: operation canceled

If I test the connection at that time it seems to work fine:

curl -k https://ziti.mydomain.com
{"data":{"apiVersions":{"edge":{"v1":{"apiBaseUrls":["https://ziti.mydomain.com:443/edge/client/v1"],"path":"/edge/client/v1"}},"edge-client":{"v1":{"apiBaseUrls":["https://ziti.mydomain.com:443/edge/client/v1"],"path":"/edge/client/v1"}},"edge-management":{"v1":{"apiBaseUrls":["https://ziti.mydomain.com:443/edge/management/v1"],"path":"/edge/management/v1"}},"edge-oidc":{"v1":{"apiBaseUrls":["https://ziti.mydomain.com:443"],"path":"/oidc"}},"health-checks":{"v1":{"apiBaseUrls":[],"path":"/health-checks/v1"}}},"buildDate":"2025-12-04T23:23:51Z","capabilities":["OIDC_AUTH"],"revision":"5afd4d7837fc","runtimeVersion":"go1.25.4","version":"v1.6.12"},"meta":{}}

After restarting all works fine again.

systemctl restart ziti-edge-tunnel.service

Any ideas would be much appreciated!

2

Hi @joost, welcome to the community and to OpenZiti!

I'm sorry you're hitting this issue but I'm happy to hear you're loving it so far. Certainly this shouldn't happen and even if you lose connectivity the tunneler needs to recover.

Can you provide what version of the tunneler you have? I assume it's the latest from the package repo? Also how are you authenticating the tunneler? Regular cert-based (used a jwt to enroll) or ext-jwt-signer?

Is it possible the machine is off the network for a very long time? (i assume not but figured i'd ask)

At that same time, are there any logs in the controller or router that might help?

3

Thanks for the quick reply! I’m currently monitoring the situation, stable atm. I’ll update with more info if this occurs again.