mirror of https://github.com/hanzozt/zt.git synced 2026-11-02 11:38:22 +00:00

Files

T

Paul LorenzandGitHub ec57c80ff7 ER/T Hosting HA chaos test and fixes (#2806 )

* Add ERT hosting chaos test. Also add ert terminator validation utility. Fixes #2288

* Rework ER/T terminator management based on SDK terminator management code

* Update deps

* Make sdk/ert-terminators into a constant

2025-02-25 17:02:21 -05:00

2.5 KiB

Raw Permalink Blame History

Purpose

This script sets up hosting for an echo service which is hosted by multiple router-embedded tunneler and multiple applications.

Prerequisites

You need at least one controller and an edge router running. for this to work. You can use the quick-start script found here.

Setup

Ensure we're logged into the controller.

ziti edge login

Remove any entities from previous runs.

ziti edge delete service echo
ziti edge delete config echo-host
ziti edge delete identities echo-host-1 echo-host-2
ziti edge delete service-policies echo-bind
ziti edge delete edge-router-policies echo
ziti edge delete service-edge-router-policies echo

ziti edge update edge-router ${entityName} --tunneler-enabled
ziti edge update identity ${entityName} --role-attributes not-hosting

Create the echo-host config

{
    "address" : "localhost",
    "port" : 1234,
    "protocol" : "tcp",
    "portChecks" : [
        {
             "address" : "localhost:2234",
             "interval" : "1s",
             "timeout" : "100ms",
             "actions" : [
                 { "trigger" : "fail", "action" : "mark unhealthy" },
                 { "trigger" : "pass", "action" : "mark healthy" }
             ]
        }
   ]
}

Create the echo service

ziti edge create service echo -c echo-host -a echo

Create and enroll the hosting identities

ziti edge create identity echo-host-1 -a echo,echo-host -o echo-host-1.jwt
ziti edge enroll --rm echo-host-1.jwt

ziti edge create identity echo-host-2 -a echo,echo-host -o echo-host-2.jwt
ziti edge enroll --rm echo-host-2.jwt

Configure policies

ziti edge create service-policy echo-bind Bind --service-roles @echo --identity-roles #echo-host
ziti edge create edge-router-policy echo --identity-roles #echo --edge-router-roles #all
ziti edge create service-edge-router-policy echo --service-roles @echo --edge-router-roles #all

Summary

You should now be to run two instances of the echo server with

ziti demo echo-server -p 1234 --health-check-addr 0.0.0.0:2234
ziti demo echo-server -p 1235 --health-check-addr 0.0.0.0:2235

and the zcat client using

ziti demo zcat -i zcat.json ziti:echo

2.5 KiB Raw Permalink Blame History