search

openziti / ziti

The parent project for OpenZiti. Here you will find the executables for a fully zero trust, application embedded, programmable network @OpenZiti
https://openziti.io
Apache License 2.0
2.43k stars 142 forks source link

create config router - wss and tls edge bindings aren't mutually exclusive #2218

Open qrkourier opened 1 month ago

qrkourier commented 1 month ago

ziti create config router edge treats the wss and tls edge bindings as mutually exclusive, but they're not, and it's a baseline case to have them enabled concurrently, especially since it's so intricate to orchestrate BrowZer.

Make a simple change to the router config generator to uncomment the wss edge binding if --wss. The tls edge binding always renders if not fabric.

qrkourier commented 1 month ago

The router will self-configure ALPNs for these distinct protocols if they happen to be on the same port, ziti-edge and h2,http/1.1, respectively.