ziti

OpenZiti (Apache 2.0): https://github.com/openziti/ziti

The project I am a maintainer on, OpenZiti is an open source project that has high-quality MacOS, iOS, Windows, Android and linux clients https://openziti.io/docs/learn/introduction/ OpenZiti underpins the private connectivity from zrok, another opensource project and is one of the ones that is __not__ riding on wireguard which many people think is a good thing, but sometimes people are interested in a wireguard-based approach. There is a huge list of alternatives as well you can find at https://github.com/anderspitman/awesome-tunneling. You can find OpenZiti and zrok on there but the github urls if interested are https://github.com/openziti/ziti and https://github.com/openziti/zrok

OpenZiti maintainer (zrok sometimes). It depends on your definitions of peer to peer. the private sharing functionality is peer-to-peer at the application level using a zero trust tunnel, but it'll ride through/over the openziti overlay network (the zero trust part). If you use the public sharing option, it's definitely "just" a reverse proxy back to your share location without the need to open a firewall hole in your home network. Super useful for plenty of tasks and there are numerous offerings like this. You can self-host everything yourself if you like or you can use the NaaS version provided by NetFoundry. We operate the zrok/openziti overlay for you in that case. To self-host you would need an openziti overlay network, a zrok controller and zrok front end. It's pretty easy (well, easy for me maybe) overall. People are starting to se

I worked on a minimal self-hosted ziti for Docker here https://github.com/openziti/ziti/tree/release-next/quickstar... and minimal self-hosted zrok (includes ziti) for Docker here https://docs.zrok.io/docs/guides/self-hosting/docker/ ...so, basically: wget https://get.openziti.io/dock/all-in-one/compose.yml docker compose up

Check out ziti and zork projects, they are a lot more innovative and ambitious https://github.com/openziti/ziti

>$ ziti – version v1.0.0 Following a few years of early adopter use, OpenZiti (Apache 2.0) graduated to 1.0 a couple weeks ago. OpenZiti enables you to spin up overlay networks, and embed them in your software. Embedding via the SDKs means your overlay network extends into the process space of your application. The network goes anywhere your software goes. What’s in the box + Overlay network endpoints, including the SDKs to integrate the overlay network endpoints into your software; customized agents for OT, IoT, edge and IT; as well as browsers, reverse proxies, modems and firewalls. + Identity, authN, authZ, policy, private DNS…integrated between app and network overlay. Includes built-in PKI, MFA and posture checks. You can use external CAs and IdPs, but aren't forced to. + The overlay network controllers and routers. Includes e2e

Thanks for the insights. OpenZiti can definitely replace Wireguard, I am have a long form comparison (which I need to publish soon) if you want me to share? Performance wise, it depends. Wireguard is UDP-based so for some use cases it gets awesome performance but not all, and often requires tweaking to optimise. OpenZiti is TCP out of the box (this year we will move it to UDP with optimisations to deliver TCP reliability with a protocol we have built - https://github.com/openziti/ziti/blob/v0.19.8/doc/transwarp_...). You can see a comparison here - https://netfoundry.io/benchmark/benchmarking%20open%20source... It would be interesting to understand too, if you replace Buzzfeed SSO with OpenZiti, are there any features you would want OpenZiti to have (i.e., can share that they exist already or we learn where we potentially need to do devel

I put together a library in Golang which lets you use Markdown in a literate programming style. Blockquotes and comments can specify associated actions, calling back into your Go code. This lets you create tutorials and scripts which can be viewed in a browser or run on the command line. We use this in the OpenZiti project (https://github.com/openziti/ziti) for our tutorials and demos. I thought others might be interested in using the code or even just the concept.

Second in a series about Go patterns used in the open source project (https://github.com/openziti/ziti) I work on for new devs joining the project. The first one covered channels, this one talks about things learned integrating generics. It's focused on things specific to the Go implementation of generics. Since it's a bit early days still for Go generics I'm curious if people have hit other issues or have found better workarounds for the issues we hit.

I am happy to introduce OpenZiti Python SDK. It allows you to: * embed zero trust secure networking right into your Python application * run your Python services without any open network ports. Powered by: https://github.com/openziti/ziti

I wrote a tool to help dig into goroutine stack dumps from customer deployments. One of the things the open source project (https://github.com/openziti/ziti) I work on does is mesh networking. This has been very helpful for looking at goroutines from multiple processes, debugging distributed systems issues. It can: * Load multiple stackdumps * Group similar goroutines automatically or manually * Group goroutines by regular expression It is written in Java, because I needed a tool and I've done Java UIs in the past. Since I do Go backend development I figured I'd spend my time getting the tool written. We also use a Go agent library (https://github.com/openziti/agent) which helps us gather stack dumps (and pprof dumps, etc) at runtime.

Zero trust is such a buzzword and overused but it really is "a good idea". This video is an overview of some zero trust concepts as well as demonstrating the power of embedding these zero trust ideas directly into the applications you write (and it's easy to do). Check it out. Video at: https://youtu.be/IPi2BxyIM8s Come join the project! Give us a star and help us spread the word to the world about application embedded zero trust http://github.com/openziti/ziti