Purpose

This script sets up the client side intercepts in a router/tunneler for an echo service

Prerequisites

You need at least one controller and an edge router running. for this to work. You can use the quick-start script found here.

Setup

Ensure we're logged into the controller

ziti edge login

Remove any entities from previous runs

ziti edge delete identities zcat 
ziti edge delete service-policies echo-dial
ziti edge delete service echo
ziti edge delete configs echo-host echo-intercept
ziti edge delete identities echo-host-1 echo-host-2
ziti edge delete service-policies echo-bind
ziti edge delete edge-router-policies echo
ziti edge delete service-edge-router-policies echo

Create the echo-intercept config

{
    "addresses" : [ "echo.ziti" ],
    "portRanges" : [
        { "low" : 1234, "high" : 1234 }
    ],
    "protocols" : ["tcp", "udp"]
}

Create the echo-host config

{
    "terminators" : [
        {
            "address" : "localhost",
            "port" : 1234,
            "protocol" : "tcp"   
        }
    ]
}

Configure a dial policy

ziti edge create service-policy echo-dial Dial --service-roles #echo --identity-roles #echo-client

Create the echo service

ziti edge create service echo -c echo-intercept,echo-host -a echo

Update edge-routers

Make sure demo edge routers are tunneler enabled and the associated identity has the echo-host attribute. Only routers with the demo-host role attribute will be updated.

ziti edge update edge-router ${entityName} --tunneler-enabled
ziti edge update identity ${entityName} --role-attributes echo-host

ziti edge update edge-router ${entityName} --tunneler-enabled
ziti edge update identity ${entityName} --role-attributes echo-client

Configure policies

ziti edge create service-policy echo-bind Bind --service-roles @echo --identity-roles #echo-host
ziti edge create edge-router-policy echo --identity-roles #echo --edge-router-roles #all
ziti edge create service-edge-router-policy echo --service-roles @echo --edge-router-roles #all

Summary

You should now be to run the echo server with

ziti demo echo-server -p 1234

and the zcat client using

ziti demo zcat tcp:echo.ziti:1234

2.8 KiB Raw Permalink Blame History