Question using SSH in OpenZiti

Support General Questions
1

When adding ssh into OpenZiti, I am confused on ways to ssh into our servers. Here are some that I have read:

  1. Utilize zssh when accessing servers. I read this blog post here: https://blog.openziti.io/zitifying-ssh
  2. Utilize a tunnel. Once setup, how would the ssh keys be utilized?

Is it possible to add our ssh keys in Ziti's Controller which correlates to the host/intercept when setting up the ssh connection?

2

Hi @MacFee

When utilizing zssh or tunneling, OpenZiti is only handling the network connectivity portion of SSH. The SSH protocol itself (user authentication, authorized_keys, certificates, etc.) remains unchanged.

In both cases, SSH keys are not managed by OpenZiti. Users still authenticate to the target system using whatever SSH authentication method the server is configured for (public/private keys, SSH certificates, passwords, LDAP, etc.).

So from the SSH server's perspective, it is simply receiving a normal SSH connection that happens to be transported over OpenZiti instead of a traditional TCP/IP network.

If you'd like OpenZiti to participate in the SSH authentication and identity management process as well, take a look at this discussion: