Unfortunately, it does not work.
As already written, an RDP connection to an RD host works without any problems.
A connection to the farm with example.ziti.local does not work.
(Server of the farm rd1.ziti.local, rd2.ziti.local etc.)
What have I done:
Creating the router:
#!/usr/bin/env bash
Working directory for the router
export ZITI_HOME=/var/lib/ziti-router
Address and port of the end point of the control level
export ZITI_CTRL_ADVERTISED_ADDRESS=externdns.de
ZITI_CTRL_ADVERTISED_PORT=9440
Address and port of this router
export ZITI_ROUTER_ADVERTISED_ADDRESS=extern-dns.de
ZITI_ROUTER_PORT=9442
ZITI_ROUTER_LISTENER_BIND_PORT=9442
ziti create config router edge --routerName router-colo1 --tunnelerMode host --private > /var/lib/ziti-router/config.yml
ziti edge create edge-router “router-colo1” --jwt-output-file router-colo1.jwt --tunneler-enabled
ziti router enroll /var/lib/private/ziti-router/config.yml --jwt /var/lib/private/ziti-router/router-colo1.jwt
Create the configurations:
ziti edge create config rdp.ziti.local.cfg.intercept intercept.v1 '{
“addresses“: [”*.ziti.local"],
“protocols“: [”tcp"],
“portRanges“: [ {”low":3389, ‘high’:3389} ],
“dialOptions": { ‘identity’: ‘$dst_hostname’ }
}'
ziti edge create config rdp.ziti.local.cfg.host host.v1 '{
"address": "127.0.0.1",
"protocol": "tcp",
"forwardPort": true,
"allowedPortRanges": [ {"low":3389,"high":3389} ],
"listenOptions": { "bindUsingEdgeIdentity": true }
}'
Create service. service_rdp.ziti.local
bind policy = @router-colo1
dial-policy = #group-identites
I get the following errors on the router:
...failed to intercept service: can not intercept services in host mode...
...ERROR ziti/tunnel/dns.NewDnsServer: system resolver test failed: failed to resolve ziti-tunnel.resolver.test: lookup ziti-tunnel.resolver.test on 127.0.0.53:53: no such host.....
On the controller:
8T15:13:01.913Z","token":"d772c1c2-f6a2-408e-aafd-aeb298528681","type":"EdgeConnectType"}
2024-10-28T15:13:02.444630+00:00 openziti ziti[116219]: {"_context":"ch{ad9eoEJBm}-\u003eu{classic}-\u003ei{7k8p}","error":"service bFs4IjCEa4x6J14Aot9Zc has no terminators for instanceId example.ziti.local.local","file":"github.com/openziti/ziti/controller/handler_edge_ctrl/common.go:79","func":"github.com/openziti/ziti/controller/handler_edge_ctrl.(*baseRequestHandler).returnError","level":"error","msg":"responded with error","operation":"create.circuit","routerId":"ad9eoEJBm","time":"2024-10-28T15:13:02.442Z","token":"d772c1c2-f6a2-408e-aafd-aeb298528681"}
2024-10-28T15:13:02.445968+00:00 openziti ziti[49366]: {"_context":"ch{edge}-\u003eu{classic}-\u003ei{mDb8}","chSeq":163762,"connId":91,"edgeSeq":0,"error":"service bFs4IjCEa4x6J14Aot9Zc has no terminators for instanceId example.ziti.local.local","file":"github.com/openziti/ziti/router/xgress_edge/listener.go:199","func":"github.com/openziti/ziti/router/xgress_edge.(*edgeClientConn).processConnect","level":"warning","msg":"failed to dial fabric","time":"2024-10-28T15:13:02.443Z","token":"d772c1c2-f6a2-408e-aafd-aeb298528681","type":"EdgeConnectType"}
2024-10-28T15:13:02.968779+00:00 openziti ziti[116219]: {"_context":"ch{ad9eoEJBm}-\u003eu{classic}-\u003ei{7k8p}","error":"service bFs4IjCEa4x6J14Aot9Zc has no terminators for instanceId example.ziti.local.local","file":"github.com/openziti/ziti/controller/handler_edge_ctrl/common.go:79","func":"github.com/openziti/ziti/controller/handler_edge_ctrl.(*baseRequestHandler).returnError","level":"error","msg":"responded with error","operation":"create.circuit","routerId":"ad9eoEJBm","time":"2024-10-28T15:13:02.968Z","token":"d772c1c2-f6a2-408e-aafd-aeb298528681"}
2024-10-28T15:13:02.968983+00:00 openziti ziti[49366]: {"_context":"ch{edge}-\u003eu{classic}-\u003ei{mDb8}","chSeq":163765,"connId":92,"edgeSeq":0,"error":"service bFs4IjCEa4x6J14Aot9Zc has no terminators for instanceId ......
Thanks for your help 
