@gooseleggs - nicely done! One thing documented in a readme you might be interested in (which won’t be included in the docker stuff yet) would be to split off the management API from the “edge client” API. In release 0.20.0, the APIs were made separately hostable. That means you could reduce the exposure to management/configuration API as well. You could opt to listen to /management calls on 127.0.0.1, for example, and not listen on 0.0.0.0 - or listen on a different port entirely from the “client” API. It’s documented decently in the changelog, but there are no examples or ‘how-tos’ at this time. You can read about it in the relevant changelog entry.
@markamind, Could you diagram how you’re deploying ZAC and using ziti here? What port are you closing in the cloud? 8443? I don’t quite have enough vision to understand what went wrong for you.
Can you open developer tools and see ‘what’ might be timing out? I need a bit more to go on.
Thanks!