Tunneler-enabled ziti-router intercepts

Support General Questions
1

Is there any necessary configuration in ziti-router's config.yml to enable intercepts when the router has mgmt property isTunnelerEnabled: true?

I see that hosting Ziti services works without special configuration, but I’m uncertain how interception is implemented in the combined tunneler+router. Is it practically-identical to how ziti-tunnel works i.e. iptables, NF-INTERCEPT, etc…?

1 Like
2

Yes, you need to enable the tunnel binding in the listeners: section.

listeners:
  - binding: tunnel
    options:
      mode: host

Mode can be host, tproxy or proxy.

2 Likes