Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ziti-router creates multiple IPs for same DNS name #960

Open
jlin-nf opened this issue Jan 19, 2023 · 1 comment · May be fixed by #2283
Open

ziti-router creates multiple IPs for same DNS name #960

jlin-nf opened this issue Jan 19, 2023 · 1 comment · May be fixed by #2283
Assignees

Comments

@jlin-nf
Copy link

jlin-nf commented Jan 19, 2023

  1. Creates multiple services with same intercept DNS name.
  2. Create bind service-policy for all services in step 1 to the same identity (endpoint on an Edge-Router)
  3. Check the intercepts on the endpoint:
    $ zt-intercepts
    Chain NF-INTERCEPT (1 references)
    target prot opt source destination
    TPROXY udp -- 0.0.0.0/0 100.64.0.3 /* testziti-dns3 / udp dpt:53 TPROXY redirect 127.0.0.1:40928 mark 0x1/0x1
    TPROXY tcp -- 0.0.0.0/0 100.64.0.2 /
    testziti-dns1 / tcp dpt:80 TPROXY redirect 127.0.0.1:45787 mark 0x1/0x1
    TPROXY tcp -- 0.0.0.0/0 100.64.0.1 /
    testziti-dns2 */ tcp dpt:443 TPROXY redirect 127.0.0.1:40217 mark 0x1/0x1

$ ping testziti.james.net
PING testziti.james.net (100.64.0.1) 56(84) bytes of data.
64 bytes from 100.64.0.1: icmp_seq=1 ttl=64 time=0.081 ms

So, only one of the service works.

@ekoby
Copy link
Member

ekoby commented Jul 31, 2024

validate if still an issue

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants