Hi James,
FYI, For the enterprise version we are still using the older versions of ziti-edge-tunnel, even for customer deployments.
Using openziti opensource, I didn’t try IP intercept till now. I will do it now.
It will be the first time trying with combination of openziti + teltonika box.
So before i proceed, please confirm below commands are correct to create a service and bind it.
ziti@ziticontroller:/openziti$ ziti edge create config “ipintercept.test.dial” intercept.v1 ‘{“protocols”:[“tcp”],“addresses”:[“100.64.219.150”], “portRanges”:[{“low”:80, “high”:80}]}’
New config ipintercept.test.dial created with id: BHM9o1J.x
ziti@ziticontroller:/openziti$ ziti edge create config “ipintercept.test.bind” host.v1 ‘{“protocol”:“tcp”, “address”:“100.64.219.150”,“port”:8000}’
New config ipintercept.test.bind created with id: gJi9o1J.NZ
ziti@ziticontroller:/openziti$ ziti edge create service " ipintercept.web.test.service" --configs “ipintercept.test.bind,ipintercept.test.dial”
New service ipintercept.web.test.service created with id: wRSWoHk.xZ
ziti@ziticontroller:/openziti$
ziti@ziticontroller:/openziti$ ziti edge delete service " ipintercept.web.test.service"
delete of service with id wRSWoHk.xZ: OK
ziti@ziticontroller:/openziti$
ziti@ziticontroller:/openziti$
ziti@ziticontroller:/openziti$ ziti edge create service “ipintercept.web.test.service” --configs “ipintercept.test.bind,ipintercept.test.dial”
New service ipintercept.web.test.service created with id: 07Gzo1JSNZ
ziti@ziticontroller:/openziti$
ziti@ziticontroller:/openziti$ ziti edge create service-policy ipintercept.web.test.service.bind.blue Bind --service-roles “@ipintercept.web.test.service” --identity-roles “@ziti-private-blue”
New service policy ipintercept.web.test.service.bind.blue created with id: bNTSo1kSN
ziti@ziticontroller:/openziti$ ziti edge create service-policy ipintercept.web.test.service.dial.teltonikaX11 Dial --service-roles “@ipintercept.web.test.service” --identity-roles “@TeltonikaX11”
New service policy ipintercept.web.test.service.dial.teltonikaX11 created with id: PzhEoHJSNZ
ziti@ziticontroller:/openziti$
ziti@ziticontroller:/openziti$
Teltonika box - ziti-edge-tunnel log
[ 540.662] INFO ziti-sdk:ziti.c:1314 ziti_set_api_session() ztx[0] api session set, setting api_session_timer to 540s
[ 896.643] INFO tunnel-cbs:ziti_tunnel_cbs.c:411 new_ziti_intercept() creating intercept for service[ipintercept.web.test.service] with intercept.v1 = {“addresses”:[“100.64.219.150”],“portRanges”:[{“high”:80,“low”:80}],“protocols”:[“tcp”]}
[ 896.643] INFO tunnel-cbs:ziti_tunnel_ctrl.c:684 on_service() starting intercepting for service[ipintercept.web.test.service]
[ 896.643] INFO ziti-edge-tunnel:ziti-edge-tunnel.c:1185 on_event() =============== service event (added) - ipintercept.web.test.service:07Gzo1JSNZ ===============
[ 924.046] INFO tunnel-cbs:ziti_tunnel_cbs.c:428 intercept_match_addr() matching 100.64.219.150
Fetching the app in the box.
root@Teltonika-RUTX11:~#
root@Teltonika-RUTX11:~# curl http://100.64.219.150
Hello World
## .
## ## ## ==
## ## ## ## ## ===
/""""""""""""""""\___/ ===
~~~ {~~ ~~~~ ~~~ ~~~~ ~~ ~ / ===- ~~~
\______ o _,/
\ \ _,'
`'--.._\..--''
root@Teltonika-RUTX11:~#
root@Teltonika-RUTX11:~#
It seems to be working. Unless you spot any error in configuration.
But i need DNS resolution to work as well, Need your help as well to resolve it, if you have a solution.
Regards,
Sameer
