search

openziti / ngx_ziti_module

An NGINX module that allows OpenZiti to front upstream servers
Apache License 2.0
11 stars 0 forks source link

Is tunneler host config ignored? #1

Closed qrkourier closed 1 year ago

qrkourier commented 1 year ago

This module allows NGINX to bind Ziti services and proxy incoming requests that arrive via Ziti to Ziti-service-specific upstreams via the normal network i.e. underlay.

The module appears to override or ignore the tunneler host.v1 config. I'd appreciate confirmation of understanding that there's no conflict with this module if a tunneler host.v1 config happens to be present on the bound Ziti service. The hosting config is merely ignored because the Edge SDK implementation in this module is not a tunneler per se, correct?

andrewpmartinez commented 1 year ago

The hosting config is merely ignored because the Edge SDK implementation in this module is not a tunneler per se, correct?

Correct! It does not attempt to integrate with host-level routing in any way that would enable the interception of IP/hostnames.

qrkourier commented 1 year ago

Right, interception would occur on the other side of the Ziti connection by which requests are arriving toward this module. I should have mentioned that I assume intercept configs have no bearing on the operation of this module because it is always "hosting," aka "terminating", never "intercepting," nor "dialing" a Ziti service.