# ZME Broken on CalyxOS - unable to reach services

**URL:** <https://openziti.discourse.group/t/zme-broken-on-calyxos-unable-to-reach-services/5194>\
**Category:** Ziti Mobile Edge for Android\
**Created:** [October 5, 2025, 10:12pm UTC](https://openziti.discourse.group/t/zme-broken-on-calyxos-unable-to-reach-services/5194 "2025-10-05T22:12:14Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![Bricklock](https://avatars.discourse-cdn.com/v4/letter/b/b3f665/32.png) [@Bricklock](https://openziti.discourse.group/u/Bricklock)\
**Post date:** [October 5, 2025, 10:12pm UTC](https://openziti.discourse.group/t/zme-broken-on-calyxos-unable-to-reach-services/5194/1 "2025-10-05T22:12:14Z")

</div>

Hi There

I was playing around in my network and have been able to reproduce the following behavior with the simplified-docker quickstart so I am confident it is an error on the Android side, whether it lies within CalyxOS or the ZME I am uncertain.

Both my ziti network and the simple quickstart work great with all other tunnelers I have used, including ZME on default Android and GrapheneOS, however using CalyxOS is broken.

The problem on Calyx:  
ZME can successfully reach the controller, authenticate, and allegedly hold a connection with the edge router. It can see the services and seems to be intercepting dns traffic.Browsing to simple.http hangs and eventually arrives at ERR\_CONNECTION\_ABORTED or ERR\_CONNECTION\_TIMED\_OUT instead of going immediately to a “This site can’t be reached” (DNS\_PROBE\_FINISHED\_NXDOMAIN) error when not connected to Ziti.

In the logs → debug info for the ZME identity there are never any entries in the Sessions: section however these clearly exist when successfully browsing to my services on graphene or android. This is my best guess at where the problem lies but haven’t been able to figure out anything deeper than that.

Any help is greatly appreciated

---

<div class="post-metadata">

**Author:** ![ekoby](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/ekoby/32/14_2.png) [@ekoby](https://openziti.discourse.group/u/ekoby)\
**Post date:** [October 6, 2025, 2:38pm UTC](https://openziti.discourse.group/t/zme-broken-on-calyxos-unable-to-reach-services/5194/2 "2025-10-06T14:38:45Z")

</div>

can you email or dm the feedback bundle?  
what hardware are you using?

---

<div class="post-metadata">

**Author:** ![Bricklock](https://avatars.discourse-cdn.com/v4/letter/b/b3f665/32.png) [@Bricklock](https://openziti.discourse.group/u/Bricklock)\
**Post date:** [October 6, 2025, 8:36pm UTC](https://openziti.discourse.group/t/zme-broken-on-calyxos-unable-to-reach-services/5194/3 "2025-10-06T20:36:13Z")

</div>

dm’d - thanks for taking a look

---

<div class="post-metadata">

**Author:** ![ekoby](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/ekoby/32/14_2.png) [@ekoby](https://openziti.discourse.group/u/ekoby)\
**Post date:** [October 17, 2025, 2:56pm UTC](https://openziti.discourse.group/t/zme-broken-on-calyxos-unable-to-reach-services/5194/4 "2025-10-17T14:56:10Z")

</div>

sorry for the delay. is your controller(`zd.controller`) available only on your LAN?

---

<div class="post-metadata">

**Author:** ![Bricklock](https://avatars.discourse-cdn.com/v4/letter/b/b3f665/32.png) [@Bricklock](https://openziti.discourse.group/u/Bricklock)\
**Post date:** [October 19, 2025, 8:22pm UTC](https://openziti.discourse.group/t/zme-broken-on-calyxos-unable-to-reach-services/5194/5 "2025-10-19T20:22:10Z")

</div>

Yeah it is, have followed up a bit and confirmed my setup is working for tunnelers on windows and linux machines as well

---

<div class="post-metadata">

**Author:** ![Bricklock](https://avatars.discourse-cdn.com/v4/letter/b/b3f665/32.png) [@Bricklock](https://openziti.discourse.group/u/Bricklock)\
**Post date:** [November 19, 2025, 10:19pm UTC](https://openziti.discourse.group/t/zme-broken-on-calyxos-unable-to-reach-services/5194/6 "2025-11-19T22:19:17Z")

</div>

This behavior is still being exhibited on version 21.0 of the android tunneler on CalyxOS.

---

<div class="post-metadata">

**Author:** ![ekoby](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/ekoby/32/14_2.png) [@ekoby](https://openziti.discourse.group/u/ekoby)\
**Post date:** [November 20, 2025, 1:13pm UTC](https://openziti.discourse.group/t/zme-broken-on-calyxos-unable-to-reach-services/5194/7 "2025-11-20T13:13:44Z")

</div>

can you send me the feedback bundle?

---

<div class="post-metadata">

**Author:** ![Bricklock](https://avatars.discourse-cdn.com/v4/letter/b/b3f665/32.png) [@Bricklock](https://openziti.discourse.group/u/Bricklock)\
**Post date:** [November 20, 2025, 8:20pm UTC](https://openziti.discourse.group/t/zme-broken-on-calyxos-unable-to-reach-services/5194/8 "2025-11-20T20:20:49Z")

</div>

sent to your dm - thanks

---

<div class="post-metadata">

**Author:** ![ekoby](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/ekoby/32/14_2.png) [@ekoby](https://openziti.discourse.group/u/ekoby)\
**Post date:** [November 20, 2025, 9:21pm UTC](https://openziti.discourse.group/t/zme-broken-on-calyxos-unable-to-reach-services/5194/9 "2025-11-20T21:21:08Z")

</div>

thanks,

I looked at the log and it seem that it connected fine when it was on your local LAN/WiFi.

---

<div class="post-metadata">

**Author:** ![Bricklock](https://avatars.discourse-cdn.com/v4/letter/b/b3f665/32.png) [@Bricklock](https://openziti.discourse.group/u/Bricklock)\
**Post date:** [November 20, 2025, 9:26pm UTC](https://openziti.discourse.group/t/zme-broken-on-calyxos-unable-to-reach-services/5194/10 "2025-11-20T21:26:56Z")

</div>

yeah it is connecting fine, but whenever I try to load a page or connect to a service with a intercepted record it cannot successfully browse to the page. It is unable to successfully start a session is what I can tell from the logs but I can’t find a cause
