openziti/ziti-tunnel repository overview

Runs "ziti tunnel tproxy" - a bi-directional, transparent proxy with Ziti DNS that's contained in the pod network namespace

useful as a k8s pod sidecar⁠

Provide a persistent, writable volume at the path specified by ZITI_IDENTITY_DIR (default /netfoundry) and set the enrollment token in ZITI_ENROLL_TOKEN.

See the ziti-host image⁠ for the preferred way to only host services with a containerized tunneler when a k8s sidecar is not required, e.g., Docker, ECS, etc.

See the ziti-edge-tunnel image⁠ for unusual cases where you wish to configure the entire system/node (not limited to the container network namespace) with a containerized tunneler.