openziti/ziti-edge-tunnel repository overview

The C tunneler has modes run (system-wide transparent proxy) and run-host (restricted to hosting/terminating services).

This image is for run mode, which has limited usefulness in a container because it always configures the entire system, not only the container's network namespace.

Provide a persistent, writable volume at the path specified by ZITI_IDENTITY_DIR (default /ziti-edge-tunnel) and set the enrollment token in ZITI_ENROLL_TOKEN.

Link to Kubernetes run daemonset documentation⁠

See the ziti-host image⁠ for only hosting services in Docker or Kubernetes.

See the ziti-tunnel image⁠ if you require a k8s sidecar tunneler that is limited to the container's network namespace.