search

openziti / ziti

The parent project for OpenZiti. Here you will find the executables for a fully zero trust, application embedded, programmable network @OpenZiti
https://openziti.io
Apache License 2.0
2.76k stars 157 forks source link

ziti-router: If you modify/delete an existing service with wildcard DNS the intercept is deleted but not reinserted for any previously queried hostnames #1440

Closed r-caamano closed 2 months ago

r-caamano commented 1 year ago

ziti-router: The first time you modify/delete an existing service with a wildcard dns as the intercept i.e. add or remove ports then the associated tproxy rule will be deleted and not re-added for any previously queried addresses. After querying a new host associated with the wildcard domain name tproxy entries are created, however they map to the previous tproxy port and not new tproxy listening port associated with the modified service. Also subsequent modifications to the same service no longer modify any tproxy entries. If you then try to delete the service, the tproxy rule is not deleted and subsequently not properly recreated if a new service is added with the same wildcard url. This issue is not cleared unless the ziti-router process is restarted.

r-caamano commented 1 year ago

Note: this also occurs if the service or identity are removed and then readded to an appwan

ekoby commented 2 months ago

fixed possibly, validate