In our environment we have centos7 installed on 90%+ fleet which has older systemd with no support for systemd-resolved split dns capability needed by ziti-edge-tunnel. So as far as I understand I have 2 options - Deploy edge-router as LAN gateway and use that to tunnel traffic to ziti network fr…

When tried using ziti-tunnel on client and using /etc/hosts to keep track of ziti service hostnames, we observed that /etc/hosts keep getting appended with ziti service hostnames but the entries are not deleted, is that expected?

I’m not as tight with sytemd and linux as I could be. I’ll bring in someone that’s got a bit more linux foo for this one.

I think we used to be able to prepend the name server in dhcpclient conf file with ziti edge tunnel to make it work if I recall it correctly. Try this if available and you have not tried it yet. Insert “prepend domain-name-servers 100.64.0.2;” into /etc/dhclient.conf or /etc/dhcp/dhclient.conf fil…

ziti-edge-tunnel should fall back to updating /etc/resolv.conf if it detects that systemd-resolved is not being used. It should try to work with systemd-resolved by checking via dbus API followed by executables (busctl, resolvectl, and systemd-resolve commands). If it can’t work with systemd-resolve…

Good idea. I always tried with systemd-resolved and when I realized systemd-resolve / resolvectl binary is not in the path by then /etc/resolv.conf was already a symlink. I can go back and start on centos 7 without doing anything with systems-resolved and see the behavior.

Just to be clear…are you using the ziti-edge-tunnel or ziti-tunnel binary on CentOS 7? The ziti-edge-tunnel code (not the same code as ziti-tunnel or ziti-router binaries) should already handle the situation gracefully when it cannot find some valid means of configuring systemd-resolved. It shoud f…

I started with ziti-edge-tunnel but ran into problem without systemd-resolved being available ( which I need to go back and revisit ). Then while looking for workaround tried edge-router-as-lan-gateway and ziti-tunnel as alternatives. Will test with fresh centos7 without systemd-resolved and post …

Feedback is welcomed here. The ziti-edge-tunnel binary received a number of enhancements to the resolver detection logic, so your experience will vary depending on how recent your binary is. I’d encourage you to use the latest release here if possible for the best experience.

Ziti-tunnel use case

Tunneler Apps Ziti Tunnel

av-dev September 15, 2022, 1:46am 7

This was the original error I saw - Getting warning related to systemd-resolved on amazon linux

Topic		Replies	Views
DNS best practices using ziti-edge-tunnel	2	595	November 12, 2024
Ziti Tunneller complaining "not find a way to configure system resolver" Ziti Edge Tunnel	15	1231	May 1, 2022
Following the ziti router as lan gateway example General Questions	23	747	September 14, 2022
Getting ziti-edge-tunnel working on RHEL 8 Ziti Tunnel	24	1162	May 16, 2022
Failed to resolve ziti-tunnel.resolver.test Ziti Tunnel	1	346	June 12, 2022

Ziti-tunnel use case

Related topics