OpenZiti ZTNA issue when communicating from 1 VPC CIDR to another in AWS

Support General Questions
1

@TheLumberjack hey again. I would like to come back to this post I spoke on before: Is this AWS architecture correct for OpenZiti ZTNA?

I have been able to setup OpenZiti ZTNA but I'm having issues. I setup the following:

  • I setup a Ziti Controller and Ziti Edge Router with public subnets which are separated in their own servers using docker compose. (These are in VPC CIDR CORP)
    • Ziti Controller has 1280 TCP 0.0.0.0/0 in it's AWS SG
    • Ziti Edge Routers has 3200 TCP 0.0.0.0/0 in it's AWS SG
  • I can communicate to my dbs in CORP so no issues there.
  • It's only when I want to have Edge Router from DEV VPC CIDR communicate to my CORP VPC CIDR.

To my question, what do I need to configure on the Ziti Edge Router in DEV to internally communicate to the CORP Ziti Edge Router? I have read that I will need to modify the ZITI_ROUTER_MODE to none?

Thank you for reading my post and awesome project. Had fun setting this up :slight_smile:

Documentation I followed for the setup:

UPDATE:

Weirdly enough it shows it's connected:

ssm-user@ip-10-50-33-55:~$ ziti fabric list links
╭────────────────────────┬─────────────┬──────────────┬─────────────┬─────────────┬─────────────┬───────────┬────────┬───────────┬───────────────────────────────────────────────────────────────╮
│ ID                     │ DIALER      │ ACCEPTOR     │ STATIC COST │ SRC LATENCY │ DST LATENCY │ STATE     │ STATUS │ FULL COST │ CONNECTIONS                                                   │
├────────────────────────┼─────────────┼──────────────┼─────────────┼─────────────┼─────────────┼───────────┼────────┼───────────┼───────────────────────────────────────────────────────────────┤
│ 3j43333kjk4j3kk3l │ dev-router0 │ corp-router0 │           1 │       4.3ms │       4.4ms │ Connected │     up │         9 │ link.default: tcp:172.18.0.2:41602 -> tcp:18.19.55.145:3022 │
│                        │             │              │             │             │             │           │        │           │ link.default: tcp:172.18.0.2:43126 -> tcp:18.19.55.145:3022 │
│                        │             │              │             │             │             │           │        │           │ link.ack: tcp:172.18.0.2:43138 -> tcp:18.19.55.145:3022     │
│                        │             │              │             │             │             │           │        │           │ link.default: tcp:172.18.0.2:43140 -> tcp:18.19.55.145:3022 │
╰────────────────────────┴─────────────┴──────────────┴─────────────┴─────────────┴─────────────┴───────────┴────────┴───────────┴───────────────────────────────────────────────────────────────╯
results: 1-1 of 1