openziti/ziti-host repository overview

The C tunneler has modes run (system-wide transparent proxy) and run-host (restricted to hosting/terminating services).

This image is for run-host mode, which is useful for hosting services in Docker and Kubernetes.

Link to Docker run-host service documentation⁠

Link to Kubernetes run-host pod documentation⁠

Provide a persistent, writable volume at the path specified by ZITI_IDENTITY_DIR (default /ziti-edge-tunnel) and set the enrollment token in ZITI_ENROLL_TOKEN.

See the ziti-edge-tunnel image⁠ for configuring the entire system/node transparent proxy with Ziti DNS in Docker or Kubernetes (not limited to the container's network namespace).

See the ziti-tunnel image⁠ if you require a k8s sidecar tunneler that is limited to the container's network namespace.