TCP-Proxying services into Openziti without DNS Intercept?

[ChristianAnton]

Hi @qrkourier

@qrkourier

Hi Christian. The router can be configured with a proxy mode that binds a specified Ziti service by name to a specified local TCP port. This is a raw, opaque, TCP proxy as a point of ingress from the normal network to the Ziti overlay. All packets arriving on that TCP port have their payloads forwarded to the Ziti service.

Do you have by instance an example on how to configure the Router with this proxy mode? I tried to understand the documentation, but from my point of view it's not yet 100% clear.

I suppose I have to configure the listen part of the Router accordingly and use the binding set to proxy if I want to just open a TCP port that connects me to a service directly. The documentation for the proxy xgress component says:

proxy - allows ingress TCP connections to connect directly to a service defined in options

How do I set this service in the options?

Something like this?

listeners:
  - binding: proxy
    address: tcp:0.0.0.0:10080
    options:
      advertise: my-cool-router.company.com:10080
      service: my-ziti-service.svc

Also, what do I have to configure in Openziti configuration? Do I still need an "intercept" config? I suppose no, right?

And can I use this listeners config for proxying on any existing (maybe the only one) Router I have? And if I want to "grab" proxied services from somewhere else, just deploy another router there and connect it with any of the others reachable to him?

Sorry for probably stupid question. Learning curve is quite steep at the beginning.

Thanks

Christian