dovholuknf

5 ms·

1.
by dovholuknf 3mo ago
I appreciate your thoughtful reply and I didn't think you were tossing any shade for what it's worth. I was just arguing that to me, both are "app embedded". IMO, the fact that traffic relays or not to me is non-conseque
2.
by dovholuknf 3mo ago
At this time OpenZiti still operates in relay pattern. All your traffic travels through an OpenZiti router. It's also a zero trust overlay so having an external server is important to make policy decisions about whether an identity is
3.
by dovholuknf 3mo ago
OpenZiti has numerous SDKs. If you are a developer and you can integrate an SDK into your application, it 100% is application-embedded. It is incorrect stating that it can't be app-embedded... (i am a maintainer on the project). Perhap
4.
by dovholuknf 4mo ago
FINALLY. This is actually exciting to me... Mind you the linux ports (cygwin, msys2, git bash) are all great to have and I make sure one version or the other is always on my path but having MS maintain them (assuming they continue to do so)
5.
by dovholuknf 5mo ago
Tailscale and Wireguard are great. I'm an OpenZiti maintainer and I've written/spoken about application embedded zero trust for many, many years. Still it seems most devs don't think it's important for whatever reas
6.
by dovholuknf 7mo ago
That's good to know. Can you point me to the peer relay code? I'd like to look at what and how it works. thanks!
7.
Implementing Zero-Trust Network Access for Microservices with OpenZiti(vroble.com)
3 points by dovholuknf 10mo ago|0 comments
8.
by dovholuknf 10mo ago
You are correct, zrok doesn't support mutual TLS. zrok is the free offering that NetFoundry supports so it's easy to see why you looked there for information. The productized version, NetFoundry Frontdoor (doc here https:/&#
9.
by dovholuknf 1y ago
The project I am a maintainer on, OpenZiti is an open source project that has high-quality MacOS, iOS, Windows, Android and linux clients https://openziti.io/docs/learn/introduction/ OpenZiti underpins the pr
10.
by dovholuknf 2y ago
Maintainer here. Yes. The routers and the controller will have a port that can accept mTLS traffic.
11.
by dovholuknf 2y ago
> "feeling like it's not a good fit for me, and indiehosters in general." Maintainer here so I'm gonna be biased with this hot take, but I really don't agree with this particular sentiment. I would turn it around
12.
by dovholuknf 2y ago
Couple of additional small notes (maintainer here) > In a similar sense, why should enterprises trust OpenZiti? you don't have to. It's open source - so you go look at all the code and judge for yourself but perhaps better than
13.
by dovholuknf 2y ago
OpenZiti maintainer here if anyone has any questions.
14.
zssh – Using Golang to implement a zero trust SSH client(blog.openziti.io)
4 points by dovholuknf 2y ago|2 comments
15.
by dovholuknf 2y ago
The post demonstrates how to build a very simplistic ssh client using the Golang standard library and the golang.org/x/crypto extended packages. After that, it demonstrates how to remove the IP-based underlay connection with an Op
16.
by dovholuknf 2y ago
I poked at it a bit but there was no free trial period. I know a bunch of people are using OpenZiti and zrok for Jupyter notebooks in general... Here's a blog I saw not long back that might help but I wasn't able to prove/tes
17.
by dovholuknf 2y ago
I don't actually know. I'll go poke with Runpod for a few and see :)
18.
by dovholuknf 2y ago
Interesting idea. I'm not very well-versed in training models or LLMs or even Jupyter Notebooks, but the comment about port forwarding SSH caught my eye since I work on a free, open source zero-trust overlay network (OpenZiti). I tried
19.
by dovholuknf 2y ago
OpenZiti maintainer (zrok sometimes). It depends on your definitions of peer to peer. the private sharing functionality is peer-to-peer at the application level using a zero trust tunnel, but it'll ride through/over the openziti o
20.
by dovholuknf 2y ago
Very neat. Lots of similar tools listed on https://github.com/anderspitman/awesome-tunneling . Seems similar to zrok.io, ngrok, cloudflare tunnels, tailscale funnels and zrok although you're using http/3 expl
21.
by dovholuknf 3y ago
Yes it's very similar to ngrok or to tailscale funnels or to cloudflare tunnels because it's a SaaS offering that someone (my employer in this case) hosts for free for the world to use... However zrok is also self-hostable and yes
22.
by dovholuknf 3y ago
"better"? I mean that's up to you. It's quite similar that's for sure, doing largely the same sort of thing but it all depends on how you use it. zrok is fully open source and fully self-hostable, that's probab
23.
Minecraft over Zrok(blog.openziti.io)
4 points by dovholuknf 3y ago|1 comments
24.
by dovholuknf 3y ago
Play Minecraft with friends without needing to open a hole in your firewall and for free. All open source too.
25.
by dovholuknf 3y ago
It might be more similar to zrok's caddy integration where you can get "fancier" than just delivering files? Blot is trying to do different stuff than zrok is it seems. Like, it's processing markdown, zrok doesn't t
26.
by dovholuknf 3y ago
Go really does have a great standard library and the abstractions/interfaces/structs in place are perfect for SDKs providing zero trust connectivity like those found in OpenZiti (or zrok)
27.
Go Is Amazing for Zero Trust(blog.openziti.io)
5 points by dovholuknf 3y ago|1 comments
28.
by dovholuknf 3y ago
I will stay with Bitwarden too, but it does look nice. I appreciate the design look/feel.
29.
Private DNS on Windows Using OpenZiti(blog.openziti.io)
1 points by dovholuknf 4y ago|0 comments
30.
by dovholuknf 4y ago
I put a PR up for zrok... :) https://github.com/anderspitman/awesome-tunneling/pull/82

More ›