# Top **URL:** https://openziti.discourse.group/top.md?page=2 [Latest](https://openziti.discourse.group/latest.md) · [Categories](https://openziti.discourse.group/categories.md) **Page:** 3 --- ## [Ziti routers and ECH](https://openziti.discourse.group/t/ziti-routers-and-ech/5320)
**Author:** [@Rantanplan](https://openziti.discourse.group/u/Rantanplan)\ **Replies:** 4\ **Last updated:** [November 17, 2025, 4:17pm UTC](https://openziti.discourse.group/t/ziti-routers-and-ech/5320 "2025-11-17T16:17:31Z")
Is there a way to enable ECH for ziti network? --- ## [Domain Posture Check Failure](https://openziti.discourse.group/t/domain-posture-check-failure/5979)
**Author:** [@cao](https://openziti.discourse.group/u/cao)\ **Replies:** 5\ **Last updated:** [August 7, 2026, 6:59am UTC](https://openziti.discourse.group/t/domain-posture-check-failure/5979 "2026-08-07T06:59:23Z")
I'm running windows Edge Client 2.9.5 to access OpenZiti Overlay Network, it works well. I try to create a Posture Check OS System Check, it works well. I try to create a Posture Check with Domain check, BUT it doesn't… --- ## [Authentication with external CA and ext-jwt-signer](https://openziti.discourse.group/t/authentication-with-external-ca-and-ext-jwt-signer/5412)
**Author:** [@dledanseur](https://openziti.discourse.group/u/dledanseur)\ **Replies:** 3\ **Last updated:** [December 19, 2025, 9:47am UTC](https://openziti.discourse.group/t/authentication-with-external-ca-and-ext-jwt-signer/5412 "2025-12-19T09:47:26Z")
Hi there, I'm trying to wrap my head around how to implement the following requirements. I would like: to ensure that only devices I control can enroll in Ziti (using a non-exportable certificate, for instance), t… --- ## [Ziti Router Log token is unverifiable error while executing keyfunc: public key not found](https://openziti.discourse.group/t/ziti-router-log-token-is-unverifiable-error-while-executing-keyfunc-public-key-not-found/5447)
**Author:** [@Tetrusp](https://openziti.discourse.group/u/Tetrusp)\ **Replies:** 4\ **Last updated:** [December 30, 2025, 3:09pm UTC](https://openziti.discourse.group/t/ziti-router-log-token-is-unverifiable-error-while-executing-keyfunc-public-key-not-found/5447 "2025-12-30T15:09:13Z")
Hi, I hope to find everyone well. Over the weekend my ziti network is refusing to route anyone’s traffic. When checking the logs on the public router I see this {"error":"token is unverifiable: error while executing k… --- ## [OpenZiti v2.0.0 HA Cluster - Clarification Questions](https://openziti.discourse.group/t/openziti-v2-0-0-ha-cluster-clarification-questions/5674)
**Author:** [@msbusk](https://openziti.discourse.group/u/msbusk)\ **Replies:** 3\ **Last updated:** [March 4, 2026, 5:56am UTC](https://openziti.discourse.group/t/openziti-v2-0-0-ha-cluster-clarification-questions/5674 "2026-03-04T05:56:13Z")
Hi all, We're currently running a single-node OpenZiti v2.0.0-pre2 setup (Docker Compose) and planning to expand to a 3-controller HA Raft cluster. I'd like to verify my understanding of how this works before we proceed… --- ## [Zrok2 connecting to self-hosted apiEndpoint issue](https://openziti.discourse.group/t/zrok2-connecting-to-self-hosted-apiendpoint-issue/5566)
**Author:** [@kazekagyee](https://openziti.discourse.group/u/kazekagyee)\ **Replies:** 2\ **Last updated:** [February 24, 2026, 3:28pm UTC](https://openziti.discourse.group/t/zrok2-connecting-to-self-hosted-apiendpoint-issue/5566 "2026-02-24T15:28:54Z")
I’m trying to migrate to zrok2, I have installed zrok2 binary and set my endpoint to my zrok domain, but when trying to enable zrok2 environment I get this: there was a problem enabling your environment! you are tryin… --- ## [What are (non-API) sessions exactly?](https://openziti.discourse.group/t/what-are-non-api-sessions-exactly/5460)
**Author:** [@techstone](https://openziti.discourse.group/u/techstone)\ **Replies:** 6\ **Last updated:** [December 30, 2025, 10:58pm UTC](https://openziti.discourse.group/t/what-are-non-api-sessions-exactly/5460 "2025-12-30T22:58:00Z")
Hi, Totally new user to OpenZiti. I went through the quickstart tutorial, and then proceeded to deploy a controller and router in a publicly accessible Linux cloud VM. I’ve installed a tunneller client on my home (Linux… --- ## [Hosted zrok v1: Reserved Public Share Returns HTTP 502 Bad Gateway Despite Successful Bind and Listener](https://openziti.discourse.group/t/hosted-zrok-v1-reserved-public-share-returns-http-502-bad-gateway-despite-successful-bind-and-listener/6124)
**Author:** [@gustavoquadri](https://openziti.discourse.group/u/gustavoquadri)\ **Replies:** 2\ **Last updated:** [September 30, 2026, 7:20pm UTC](https://openziti.discourse.group/t/hosted-zrok-v1-reserved-public-share-returns-http-502-bad-gateway-despite-successful-bind-and-listener/6124 "2026-09-30T19:20:31Z")
Hi, I'm experiencing an issue with an existing reserved public share on the hosted zrok v1 service. My reserved share is: rkg8oggjh4zg Environment ID: PhwLt-JGdr Backend: http://127.0.0.1:6767 The local FastAPI ap… --- ## [Hosting AD-related services via ziti-edge-tunnel on any domain-joined Windows host (DC or member server) breaks Cloud Kerberos Trust ticket issuance for Entra ID–joined dial clients; same configuration on an Edge Router works](https://openziti.discourse.group/t/hosting-ad-related-services-via-ziti-edge-tunnel-on-any-domain-joined-windows-host-dc-or-member-server-breaks-cloud-kerberos-trust-ticket-issuance-for-entra-id-joined-dial-clients-same-configuration-on-an-edge-router-works/5843)
**Author:** [@msbusk](https://openziti.discourse.group/u/msbusk)\ **Replies:** 4\ **Last updated:** [June 9, 2026, 6:07pm UTC](https://openziti.discourse.group/t/hosting-ad-related-services-via-ziti-edge-tunnel-on-any-domain-joined-windows-host-dc-or-member-server-breaks-cloud-kerberos-trust-ticket-issuance-for-entra-id-joined-dial-clients-same-configuration-on-an-edge-router-works/5843 "2026-06-09T18:07:54Z")
Summary When an OpenZiti service intercepting Active Directory traffic (DNS on 53, Kerberos on 88, LDAP on 389/636, SMB on 445) is bound by ziti-edge-tunnel running on any domain-joined Windows host — whether that host i… --- ## [OpenZiti PKI distribution](https://openziti.discourse.group/t/openziti-pki-distribution/5455)
**Author:** [@rookiejtc](https://openziti.discourse.group/u/rookiejtc)\ **Replies:** 4\ **Last updated:** [December 27, 2025, 7:29pm UTC](https://openziti.discourse.group/t/openziti-pki-distribution/5455 "2025-12-27T19:29:29Z")
Is there a guide somewhere on how best to integrate our own PKI into OpenZiti and reliably distribute the new certificates to all devices (including all existing clients)? For xample also when renewing all certs after a… --- ## [Recurring account-wide HTTP 429 across all active shares — share count ruled out](https://openziti.discourse.group/t/recurring-account-wide-http-429-across-all-active-shares-share-count-ruled-out/6107)
**Author:** [@Ak353](https://openziti.discourse.group/u/Ak353)\ **Replies:** 6\ **Last updated:** [September 30, 2026, 7:20pm UTC](https://openziti.discourse.group/t/recurring-account-wide-http-429-across-all-active-shares-share-count-ruled-out/6107 "2026-09-30T19:20:15Z")
Recurring account-wide HTTP 429 across all active shares — share count ruled out, 5 other fixes tried, none resolved it Setup: 1 environment, normally 6 active public reserved shares (fixed subdomain names via zrok sha… --- ## [One client with wrong clock caused whole network down](https://openziti.discourse.group/t/one-client-with-wrong-clock-caused-whole-network-down/6158)
**Author:** [@AlexZ](https://openziti.discourse.group/u/AlexZ)\ **Replies:** 5\ **Last updated:** [October 2, 2026, 1:46pm UTC](https://openziti.discourse.group/t/one-client-with-wrong-clock-caused-whole-network-down/6158 "2026-10-02T13:46:16Z")
Short summary before the long read: A windows client with a bad clock, trying to recconnect too often( about 40 times per second ) which causing api sessions number to raise and cleanup locking bbolt database, which in… --- ## [No ziti0 interface on edge router VM with tunneler enabled, yet service still works?](https://openziti.discourse.group/t/no-ziti0-interface-on-edge-router-vm-with-tunneler-enabled-yet-service-still-works/5461)
**Author:** [@techstone](https://openziti.discourse.group/u/techstone)\ **Replies:** 4\ **Last updated:** [January 7, 2026, 5:29am UTC](https://openziti.discourse.group/t/no-ziti0-interface-on-edge-router-vm-with-tunneler-enabled-yet-service-still-works/5461 "2026-01-07T05:29:17Z")
Hi, Totally new user to OpenZiti. I went through the quickstart tutorial, and then proceeded to deploy a controller and router in a publicly accessible Linux cloud VM. I’ve installed a tunneller client on my home (Linux… --- ## [Onprem AD/gpupdate](https://openziti.discourse.group/t/onprem-ad-gpupdate/5422)
**Author:** [@strongwazz](https://openziti.discourse.group/u/strongwazz)\ **Replies:** 4\ **Last updated:** [December 15, 2025, 4:12am UTC](https://openziti.discourse.group/t/onprem-ad-gpupdate/5422 "2025-12-15T04:12:41Z")
We have a ziti environment, on 1.7.1 I have a basic service setup, that mimics emoscardini’s approach ( Conneting Remote Endpoints with a On-Prem AD - #6 by emoscardini ) For argument’s sake, we have hosted tenant env… --- ## [Network interruption causes ziti-tunnel to fail to recover](https://openziti.discourse.group/t/network-interruption-causes-ziti-tunnel-to-fail-to-recover/5928)
**Author:** [@maika](https://openziti.discourse.group/u/maika)\ **Replies:** 5\ **Last updated:** [July 7, 2026, 11:45am UTC](https://openziti.discourse.group/t/network-interruption-causes-ziti-tunnel-to-fail-to-recover/5928 "2026-07-07T11:45:06Z")
Hello, I am encountering an issue when using ziti-tunnel. After a network interruption and when the network returns to normal, the ziti network fails to recover for unused service. This type of network interruption may… --- ## [Multiple links between two routers](https://openziti.discourse.group/t/multiple-links-between-two-routers/5723)
**Author:** [@Rantanplan](https://openziti.discourse.group/u/Rantanplan)\ **Replies:** 6\ **Last updated:** [March 29, 2026, 1:43pm UTC](https://openziti.discourse.group/t/multiple-links-between-two-routers/5723 "2026-03-29T13:43:39Z")
I’m trying to establish multiple links between two routers and would appreciate some clarification on the expected behavior. From what I understand, it is possible to configure multiple listeners on a router by simply a… --- ## [Development of microsegmentation with IoT-OpenZiti integration](https://openziti.discourse.group/t/development-of-microsegmentation-with-iot-openziti-integration/5543)
**Author:** [@urbanhuee112](https://openziti.discourse.group/u/urbanhuee112)\ **Replies:** 4\ **Last updated:** [February 16, 2026, 1:00pm UTC](https://openziti.discourse.group/t/development-of-microsegmentation-with-iot-openziti-integration/5543 "2026-02-16T13:00:57Z")
Hi OpenZiti community, Looking for guidance on using OpenZiti for microsegmentation in an IoT gateway setup. I'm exploring OpenZiti for microsegmentation in an IoT gateway environment and would appreciate some guidance… --- ## [How to migrate a self-hosted controller and router to a new VM and domain?](https://openziti.discourse.group/t/how-to-migrate-a-self-hosted-controller-and-router-to-a-new-vm-and-domain/5820)
**Author:** [@lex529](https://openziti.discourse.group/u/lex529)\ **Replies:** 3\ **Last updated:** [May 11, 2026, 1:48pm UTC](https://openziti.discourse.group/t/how-to-migrate-a-self-hosted-controller-and-router-to-a-new-vm-and-domain/5820 "2026-05-11T13:48:59Z")
Hi all, I'm running a self-hosted OpenZiti deployment on a single Azure VM, where the controller and the edge router live together, it was setup using the install script, i'm planning to switch that do docker. The VM cu… --- ## [Zrok2 500 error enable](https://openziti.discourse.group/t/zrok2-500-error-enable/5609)
**Author:** [@A\_B](https://openziti.discourse.group/u/A_B)\ **Replies:** 2\ **Last updated:** [February 23, 2026, 4:00pm UTC](https://openziti.discourse.group/t/zrok2-500-error-enable/5609 "2026-02-23T16:00:28Z")
Have a nice day! Need help Installed on Linux Mint 22.1 Cinnamon zrok2 version \_ \_\_\_\_ \_\_ \_\_ | | \_\_ |\_ / '/ \_ | |/ / / /| | | () | \< /|| \_\_/||\\ v2.0.0-rc5 \[8f8c125e\] zrok2 enable --headless \[ 0.593\] INFO main.(… --- ## [MFA with Go SDK](https://openziti.discourse.group/t/mfa-with-go-sdk/5282)
**Author:** [@rja](https://openziti.discourse.group/u/rja)\ **Replies:** 4\ **Last updated:** [November 18, 2025, 5:25pm UTC](https://openziti.discourse.group/t/mfa-with-go-sdk/5282 "2025-11-18T17:25:49Z")
Hello everyone, I’m trying to auth with MFA using the Go SDK. I’m able to enable MFA on the identity. It passes the VerifyZitiMfa(code)function call and returns the recovery codes etc. When I try to auth, it’s returnin… --- ## [Self-hosted Anytype over openziti](https://openziti.discourse.group/t/self-hosted-anytype-over-openziti/5415)
**Author:** [@rand](https://openziti.discourse.group/u/rand)\ **Replies:** 3\ **Last updated:** [December 13, 2025, 4:42pm UTC](https://openziti.discourse.group/t/self-hosted-anytype-over-openziti/5415 "2025-12-13T16:42:32Z")
Hello community! I’ve successfully installed openziti network and it’s working great with web-services. Recently I’ve tried to install self-hosted Anytype server and it also works fine in my local network. But it doesn’… --- ## [Struggling to enable metrics on zrok2 self host install with docker](https://openziti.discourse.group/t/struggling-to-enable-metrics-on-zrok2-self-host-install-with-docker/5764)
**Author:** [@seb512](https://openziti.discourse.group/u/seb512)\ **Replies:** 5\ **Last updated:** [April 19, 2026, 12:35pm UTC](https://openziti.discourse.group/t/struggling-to-enable-metrics-on-zrok2-self-host-install-with-docker/5764 "2026-04-19T12:35:59Z")
Following the docker deployment guide, I’ve enabled metrics in .env and with the docker compose command, but then it says to refer to the Linux guide to get the OpenZiti controller to emit \*\*fabric.usage\*\*events. Though … --- ## [/enable 500 on share creation](https://openziti.discourse.group/t/enable-500-on-share-creation/6069)
**Author:** [@blik616287](https://openziti.discourse.group/u/blik616287)\ **Replies:** 2\ **Last updated:** [September 9, 2026, 8:41am UTC](https://openziti.discourse.group/t/enable-500-on-share-creation/6069 "2026-09-09T08:41:20Z")
Share creation fails for every share type and every environment on the account, while all reads succeed. One thing up front so nobody chases the wrong thing: the shares on this account were deleted by our own tooling … --- ## [Active Directory and DNS](https://openziti.discourse.group/t/active-directory-and-dns/5391)
**Author:** [@Krishopper](https://openziti.discourse.group/u/Krishopper)\ **Replies:** 4\ **Last updated:** [December 3, 2025, 3:48pm UTC](https://openziti.discourse.group/t/active-directory-and-dns/5391 "2025-12-03T15:48:43Z")
I went through and setup resources from this post: Conneting Remote Endpoints with a On-Prem AD - #6 by emoscardini Things were working great until I was troubleshooting why machines are not enrolling with Entra and Int… --- ## [Is this AWS architecture correct for OpenZiti ZTNA?](https://openziti.discourse.group/t/is-this-aws-architecture-correct-for-openziti-ztna/5800)
**Author:** [@MacFee](https://openziti.discourse.group/u/MacFee)\ **Replies:** 3\ **Last updated:** [April 30, 2026, 4:49pm UTC](https://openziti.discourse.group/t/is-this-aws-architecture-correct-for-openziti-ztna/5800 "2026-04-30T16:49:13Z")
Hey all. I have been taking baby steps in setting up OpenZiti ZTNA in my company's architecture. I don't want to deal with multiple VPNs but only have 1 centralized VPN being OpenZiti. Am I understanding this correctly w… --- ## [Zrok agent: \[POST /share\]\[409\] shareConflict](https://openziti.discourse.group/t/zrok-agent-post-share-409-shareconflict/5845)
**Author:** [@pansutodeus](https://openziti.discourse.group/u/pansutodeus)\ **Replies:** 1\ **Last updated:** [May 29, 2026, 12:20pm UTC](https://openziti.discourse.group/t/zrok-agent-post-share-409-shareconflict/5845 "2026-05-29T12:20:19Z")
Hello, first of all thanks for this project :heart\_eyes: I am having the following issue, maybe I am not doing it properly or misunderstood something about the agent. My workflow is the following i create a name: zrok… --- ## [Existing Session Remains Valid After Account Is Deactivated in External IdP](https://openziti.discourse.group/t/existing-session-remains-valid-after-account-is-deactivated-in-external-idp/5999)
**Author:** [@tomc](https://openziti.discourse.group/u/tomc)\ **Replies:** 5\ **Last updated:** [August 26, 2026, 7:40pm UTC](https://openziti.discourse.group/t/existing-session-remains-valid-after-account-is-deactivated-in-external-idp/5999 "2026-08-26T19:40:18Z")
I’m testing OpenZiti 2.0.1 with Authentik as the external OIDC identity provider. I authenticated successfully through Authentik and established an OpenZiti session. I then deactivated the corresponding user account in … --- ## [Ziti Admin Console Lock Screen - Feature Request (if not bug)](https://openziti.discourse.group/t/ziti-admin-console-lock-screen-feature-request-if-not-bug/5858)
**Author:** [@bvh](https://openziti.discourse.group/u/bvh)\ **Replies:** 5\ **Last updated:** [June 15, 2026, 4:18pm UTC](https://openziti.discourse.group/t/ziti-admin-console-lock-screen-feature-request-if-not-bug/5858 "2026-06-15T16:18:31Z")
Quick question. Out of curiosity, is the Ziti Admin Console supposed to lock and go back to the initial login screen (shown below) after it hits the inactivity threshold? So far, I only get the 'true' login screen wh… --- ## [Stack dumps for GitHub issue #3769 (router stuck after controller restart)](https://openziti.discourse.group/t/stack-dumps-for-github-issue-3769-router-stuck-after-controller-restart/5746)
**Author:** [@galex-gh](https://openziti.discourse.group/u/galex-gh)\ **Replies:** 6\ **Last updated:** [April 10, 2026, 8:07am UTC](https://openziti.discourse.group/t/stack-dumps-for-github-issue-3769-router-stuck-after-controller-restart/5746 "2026-04-10T08:07:17Z")
collection\_log.zip (184.2 KB) Hi @plorenz, As requested in #3769, here are stack dumps from all components collected during bug reproduction. Setup: v1.6.14, 1 controller + 1 public router (same VPS), 1 dark router (L… --- ## [OpenZiti SpringBoot Version Upgrade Exception](https://openziti.discourse.group/t/openziti-springboot-version-upgrade-exception/5875)
**Author:** [@Juggernaut](https://openziti.discourse.group/u/Juggernaut)\ **Replies:** 5\ **Last updated:** [June 5, 2026, 8:30am UTC](https://openziti.discourse.group/t/openziti-springboot-version-upgrade-exception/5875 "2026-06-05T08:30:55Z")
Hi everyone，I deployed an OpenZiti SDN environment following the official guide, and completed configuration for Identities, Services and other relevant components. Afterwards, I built a simple project referencing the m… --- ## [Router OIDC Support](https://openziti.discourse.group/t/router-oidc-support/5654)
**Author:** [@McGonagall666](https://openziti.discourse.group/u/McGonagall666)\ **Replies:** 5\ **Last updated:** [February 27, 2026, 12:51pm UTC](https://openziti.discourse.group/t/router-oidc-support/5654 "2026-02-27T12:51:04Z")
I'd like to ask if the router currently supports Keycloak authentication.If it's supported, how do I do it？ --- ## [Expired certs renewed using same keys are giving TLS errors](https://openziti.discourse.group/t/expired-certs-renewed-using-same-keys-are-giving-tls-errors/5739)
**Author:** [@nenkoru](https://openziti.discourse.group/u/nenkoru)\ **Replies:** 6\ **Last updated:** [April 7, 2026, 5:59pm UTC](https://openziti.discourse.group/t/expired-certs-renewed-using-same-keys-are-giving-tls-errors/5739 "2026-04-07T17:59:37Z")
Hello there! Long time no see(posting)…. So I have my Openziti PKI setup manually as per my guide here GitHub - nenkoru/openziti\_manual\_pki: Bootstrap PKI for OpenZiti manually · GitHub And today certs have expired … --- ## [Hosted zrok2 enable returning 500 / cannot release shares in API console](https://openziti.discourse.group/t/hosted-zrok2-enable-returning-500-cannot-release-shares-in-api-console/6028)
**Author:** [@steevejfr](https://openziti.discourse.group/u/steevejfr)\ **Replies:** 2\ **Last updated:** [September 1, 2026, 7:26am UTC](https://openziti.discourse.group/t/hosted-zrok2-enable-returning-500-cannot-release-shares-in-api-console/6028 "2026-09-01T07:26:39Z")
Hello, I'm using the hosted zrok service (api-v2.zrok.io) with zrok2 v2.0.4 on Windows 11. My environment is currently stuck and I'm unable to enable or release anything. Symptom 1 — zrok2 enable fails: Running zrok2 e… --- ## [External JWT Signer with Authentik](https://openziti.discourse.group/t/external-jwt-signer-with-authentik/5441)
**Author:** [@astro](https://openziti.discourse.group/u/astro)\ **Replies:** 3\ **Last updated:** [December 17, 2025, 11:15pm UTC](https://openziti.discourse.group/t/external-jwt-signer-with-authentik/5441 "2025-12-17T23:15:11Z")
Hey, I’m having trouble setting up an external JWT Signer with Authentik. I was wondering if anyone was willing to share his configuration, to see if I’m missing anything in mine… Here’s my setup right now: { "\_link… --- ## [Ziti desktop edge clients](https://openziti.discourse.group/t/ziti-desktop-edge-clients/5693)
**Author:** [@msbusk](https://openziti.discourse.group/u/msbusk)\ **Replies:** 3\ **Last updated:** [March 13, 2026, 12:36pm UTC](https://openziti.discourse.group/t/ziti-desktop-edge-clients/5693 "2026-03-13T12:36:55Z")
Hi everyone, I would like to raise a concern from a security perspective regarding the Desktop Edge Client, both on macOS and Windows (primarily Windows). As I understand it, once the Ziti Desktop Edge Client is instal… --- ## [Can't Install OpenZiti2.0](https://openziti.discourse.group/t/cant-install-openziti2-0/5854)
**Author:** [@maika](https://openziti.discourse.group/u/maika)\ **Replies:** 4\ **Last updated:** [May 28, 2026, 2:15am UTC](https://openziti.discourse.group/t/cant-install-openziti2-0/5854 "2026-05-28T02:15:28Z")
Hello, I followed the instructions in OpenZiti 2.x to install, but the installed version is still v1.6.15. Please help me take a look --- ## [Controller advertised address is ignoring port](https://openziti.discourse.group/t/controller-advertised-address-is-ignoring-port/6101)
**Author:** [@duncan.simey](https://openziti.discourse.group/u/duncan.simey)\ **Replies:** 6\ **Last updated:** [September 28, 2026, 12:39pm UTC](https://openziti.discourse.group/t/controller-advertised-address-is-ignoring-port/6101 "2026-09-28T12:39:53Z")
Hi - I'm using Ziti v1 and, it's great; but migrating to v2 is proving a challenge! Our primary controller and router are on a single host, accessed via Nginx on port 443 with proxy destination selected by hostname. We… --- ## [Benchmarks for OpenZiti compared to other competitors](https://openziti.discourse.group/t/benchmarks-for-openziti-compared-to-other-competitors/5926)
**Author:** [@MacFee](https://openziti.discourse.group/u/MacFee)\ **Replies:** 2\ **Last updated:** [July 3, 2026, 3:58am UTC](https://openziti.discourse.group/t/benchmarks-for-openziti-compared-to-other-competitors/5926 "2026-07-03T03:58:25Z")
With OpenZiti being our primary VPN in our company, developers love using it and Director also never knew this existed as an open source tool and loves it. Again, I appreciate the team open sourcing this awesome project. … --- ## [My share is not working](https://openziti.discourse.group/t/my-share-is-not-working/6129)
**Author:** [@Gaurvv](https://openziti.discourse.group/u/Gaurvv)\ **Replies:** 3\ **Last updated:** [September 30, 2026, 7:20pm UTC](https://openziti.discourse.group/t/my-share-is-not-working/6129 "2026-09-30T19:20:38Z")
My zrok account has a reserved public name: foreverchat-2205-private.shares.zrok.io The reservation exists, but creating a share using: zrok2 share public http://127.0.0.1:3000 -n public:foreverchat-2205-private --hea… --- ## [Wildcard intercept stops working when a host-specific RDP service is also assigned](https://openziti.discourse.group/t/wildcard-intercept-stops-working-when-a-host-specific-rdp-service-is-also-assigned/5312)
**Author:** [@msbusk](https://openziti.discourse.group/u/msbusk)\ **Replies:** 3\ **Last updated:** [November 7, 2025, 2:48pm UTC](https://openziti.discourse.group/t/wildcard-intercept-stops-working-when-a-host-specific-rdp-service-is-also-assigned/5312 "2025-11-07T14:48:59Z")
Hi all, I’m running into an odd behavior with two ZTNA services assigned to the same Edge client: Service A (wildcard): intercepts \*.subdomian.example.tld and .subdomian.example.tld for a range of TCP/UDP ports (Kerb… --- ## [Alternate server certificate not selected, workaround](https://openziti.discourse.group/t/alternate-server-certificate-not-selected-workaround/5550)
**Author:** [@shawncp](https://openziti.discourse.group/u/shawncp)\ **Replies:** 4\ **Last updated:** [February 15, 2026, 12:27pm UTC](https://openziti.discourse.group/t/alternate-server-certificate-not-selected-workaround/5550 "2026-02-15T12:27:00Z")
Greetings, Edit 2026-02-09 (workaround): I stopped the zac container and installed the console into the controller container using this guide https://netfoundry.io/docs/openziti/learn/quickstarts/zac/. Now the correc… --- ## [Limit to shares on zrok?](https://openziti.discourse.group/t/limit-to-shares-on-zrok/5448)
**Author:** [@0024logan](https://openziti.discourse.group/u/0024logan)\ **Replies:** 2\ **Last updated:** [January 5, 2026, 2:01pm UTC](https://openziti.discourse.group/t/limit-to-shares-on-zrok/5448 "2026-01-05T14:01:53Z")
It seems I have a max of two reserved shares at one time both running with udptunnel backend. This two only seem to be able to run for about 30 mins before ssh times out and the tunnel closes. When I connect back to my A… --- ## [WebRtc SDK nodeJS](https://openziti.discourse.group/t/webrtc-sdk-nodejs/5899)
**Author:** [@dorianEliptec](https://openziti.discourse.group/u/dorianEliptec)\ **Replies:** 4\ **Last updated:** [June 30, 2026, 4:20pm UTC](https://openziti.discourse.group/t/webrtc-sdk-nodejs/5899 "2026-06-30T16:20:37Z")
Hello, I'm working on a project where we've implemented the SDK. They work well except for one thing: when I try to watch live video via WEBRTC, it doesn't work, whereas when I use the Ziti Tunnelers, it works. The stra… --- ## [Quickstart docker compose, integrate it with kubernetes](https://openziti.discourse.group/t/quickstart-docker-compose-integrate-it-with-kubernetes/5369)
**Author:** [@akbarmavs](https://openziti.discourse.group/u/akbarmavs)\ **Replies:** 6\ **Last updated:** [November 25, 2025, 3:28pm UTC](https://openziti.discourse.group/t/quickstart-docker-compose-integrate-it-with-kubernetes/5369 "2025-11-25T15:28:00Z")
Hi, i set up my environment using docker compose quickstart guide, and for the next step, i have simple nginx running in kubernetes, and i want it to be integrate it to openziti from docker, is it possible? Because i alr… --- ## [OpenZiti router stuck at 100% CPU](https://openziti.discourse.group/t/openziti-router-stuck-at-100-cpu/6152)
**Author:** [@Krishopper](https://openziti.discourse.group/u/Krishopper)\ **Replies:** 5\ **Last updated:** [October 2, 2026, 9:46pm UTC](https://openziti.discourse.group/t/openziti-router-stuck-at-100-cpu/6152 "2026-10-02T21:46:18Z")
I'm seeing an issue where one of my OpenZiti routers periodically gets stuck using 100% of one CPU core. I'm running OpenZiti 2.0.6. I caught it while it was happening and took a 30-second CPU pprof. Almost all of the … --- ## [A question about third-party CA](https://openziti.discourse.group/t/a-question-about-third-party-ca/5862)
**Author:** [@pklong020](https://openziti.discourse.group/u/pklong020)\ **Replies:** 1\ **Last updated:** [June 4, 2026, 12:00pm UTC](https://openziti.discourse.group/t/a-question-about-third-party-ca/5862 "2026-06-04T12:00:52Z")
Hello there，I am currently trying to build a zero trust network that covers same IoT devices using openziti. At first, everything went smoothly, but when I tried to use the tunneler on IoT devices, I have encountered a p… --- ## [Boltdb edge snapshot failed - error 500](https://openziti.discourse.group/t/boltdb-edge-snapshot-failed-error-500/5358)
**Author:** [@Tetrusp](https://openziti.discourse.group/u/Tetrusp)\ **Replies:** 4\ **Last updated:** [November 27, 2025, 8:56pm UTC](https://openziti.discourse.group/t/boltdb-edge-snapshot-failed-error-500/5358 "2025-11-27T20:56:38Z")
Hi all, I am encountering an issue with snapshotting the boltdb on controller v 1.6.6. error: error updating database/snapshot instance in Ziti Edge Controller at \`\`https://\/edge/management/v1\`\`. Status code… --- ## [Solution to Integrate with IPS/IDS](https://openziti.discourse.group/t/solution-to-integrate-with-ips-ids/5727)
**Author:** [@cao](https://openziti.discourse.group/u/cao)\ **Replies:** 4\ **Last updated:** [March 31, 2026, 8:59am UTC](https://openziti.discourse.group/t/solution-to-integrate-with-ips-ids/5727 "2026-03-31T08:59:04Z")
While using OpenZiti Overlay Network for Enterprise, Is there a way to integrate with IPS/IDS? Architecture: Client → Ziti Edge Tunneler → Ziti Overlay Network → Ziti Edge Tunneler → Service Application traffics are T… --- ## [Ziti Edge Tunnel as Sidecar on AWS ECS Fargate](https://openziti.discourse.group/t/ziti-edge-tunnel-as-sidecar-on-aws-ecs-fargate/5554)
**Author:** [@ss\_vinoth22](https://openziti.discourse.group/u/ss_vinoth22)\ **Replies:** 6\ **Last updated:** [February 12, 2026, 4:27pm UTC](https://openziti.discourse.group/t/ziti-edge-tunnel-as-sidecar-on-aws-ecs-fargate/5554 "2026-02-12T16:27:37Z")
I’m exploring the possibility of using Ziti Edge Tunnel as a sidecar container in AWS ECS Fargate and had a few questions around feasibility and best practices: Has anyone on the NetFoundry / OpenZiti community or suppo… --- ## [Error 500 when deleting the environment](https://openziti.discourse.group/t/error-500-when-deleting-the-environment/6105)
**Author:** [@Saxan007](https://openziti.discourse.group/u/Saxan007)\ **Replies:** 3\ **Last updated:** [September 24, 2026, 12:31pm UTC](https://openziti.discourse.group/t/error-500-when-deleting-the-environment/6105 "2026-09-24T12:31:59Z")
Hello! My environment is broken; I haven't been able to delete it for over two hours—I keep getting a 500 error. Please delete the broken environment root@ad8f8a4a71d5. I can provide any additional information you mig… [Previous page](https://openziti.discourse.group/top.md?page=1&per_page=50) [Next page](https://openziti.discourse.group/top.md?page=3&per_page=50)