Zrok: An open source sharing solution built on OpenZiti (zero trust networking)

zrok.io

10 points·notamy··2 comments

Is this actually peer to peer. I can imagine how exposing something on the public internet would work the way the diagram is showing. The public end of the noodle has to go to another server right? What does the company have to host in order for this stuff to work?

OpenZiti maintainer (zrok sometimes). It depends on your definitions of peer to peer. the private sharing functionality is peer-to-peer at the application level using a zero trust tunnel, but it'll ride through/over the openziti overlay network (the zero trust part).

If you use the public sharing option, it's definitely "just" a reverse proxy back to your share location without the need to open a firewall hole in your home network. Super useful for plenty of tasks and there are numerous offerings like this.

You can self-host everything yourself if you like or you can use the NaaS version provided by NetFoundry. We operate the zrok/openziti overlay for you in that case. To self-host you would need an openziti overlay network, a zrok controller and zrok front end. It's pretty easy (well, easy for me maybe) overall. People are starting to self-host more and more zrok instances. The software is all strictly opensource and a liberal apache v2 license. You can find them on github:

* https://github.com/openziti/ziti/ * https://github.com/openziti/zrok

If you (or anyone) appreciate free, open source tooling like this, don't forget to give the projects a star on github and help spread the word! :)

Reply on news.ycombinator.com