What it does
OpenZiti is a self-hostable networking platform with controllers, edge routers, identity policies and tunnelers or SDKs for private service access.
OpenZiti makes the service and its permitted identities the unit of access. A controller manages identities and policy; edge routers carry the traffic; tunnelers connect existing applications, while SDKs can put the connection into application code. This gives an administrator a migration route from host-level access toward per-application integration.
Choose the deployment model deliberately. A router at the network boundary, a tunneler beside a service and an embedded SDK place the access boundary in different locations. The project documents those differences and provides a management API and console. Running the platform means operating its control and routing components, rather than buying a public exit location.
Strengths
- Existing applications can use tunnelers without code changes
- Per-service identity policies and management API
Watch out for
- Self-hosting includes controller, router and identity operations
Best for
- Teams building controlled access to private services