I was asked today if OpenZiti could intercept a Unix domain socket… can it? The idea was that if it could, then instead of hosting a piece of SW on the same host as another and using UDS locally, instead one piece of SW could be on another host and inter-communicate across the overlay.
No. OpenZiti operates on internet/network/IP sockets (layers 3/4). A unix domain socket is not an internet/network/IP socket.
That was my immediate thought but was hoping I was missing something. Thanks.
An IP socket with a destination of 127.0.0.1 (or in the 127.0.0.0/8 range) is also guaranteed to stay on the box.