ziti VS mqziti

If you are not aware of what OpenZiti is, this is the description available on their website:

fwiw, its back up. stars for zrok and ziti (i.e., the parent repo) are super appreciated!

https://github.com/openziti/ziti (1.2k stars)

Create an AUR package for the ziti binaries

I ask because I'm going to start with the simplified-docker-compose.yml file instead of the more complicated one for starters

OpenZiti is the most sophisticated and simple-to-use ZTNA platform on the planet. Allows you to create micro-segmented ZTNA networks by desktop application, web application, device, containers, API, and servers. All data is distributed dynamically across an overlay mesh network focused on routing performance, self-healing, and latency. It has desktop clients on all operating systems, pre-built SSH consoles, and SDKs in different languages to integrate OpenZiti into any product natively. And best of all, it's Open-Source. Seriously, try it, you'll be mind-blowing...

This repo hosts the OpenZiti SDK for NodeJS, and is designed to help you deliver secure applications over a OpenZiti Network - https://github.com/openziti/ziti-sdk-nodejs.

zrok.io seems fit for this purpose though you'd have to do a little work like combining it with FileGator or similar. Future releases would add this functionality directly, you could just watch the project. It is fundamentally designed for web app & webhook testing. It's built on top of a zero-trust networking overlay technology called openziti.io. There are developer discourse channels to help.

You're welcome. Also, if you want to see some cool things on ziti using our Go SDK: - We embedded it into Prometheus: https://docs.openziti.io/blog/zitification/prometheus/part1/ - We embedded it into Kubectl: https://blog.openziti.io/kubernetes - We embedded it into Elastic (Beats and Logtash executables): https://blog.openziti.io/zero-trust-monitoring-with-openziti - We embedded it into a Go based MQTT client/server: https://github.com/ekoby/mqziti

With regards to solving port forwarding issue, you could setup an overlay network which does outbound only connectivity. For example, I work on the open source OpenZiti project which would deliver exactly this (and more) https://openziti.github.io/. I am not sure we have done anything with Mosquito, I know a colleague took our Go SDK and put it inside a Go MQTT client/server to create MQZiti (https://github.com/ekoby/mqziti), i.e., the zero trust network agent is inside the MQTT client and server so no need for extra tunneling agents.

I work on an open source project called OpenZiti, it allows you to embed zero trust networking into anything - think Cloudflare ZT tunnel on steroids, no inbound ports anywhere, fully self-hosted etc. One of our engineers recently took our Go SDK and embedded it in an MQTT written in Go - https://github.com/ekoby/mqziti. You could easily start with non-app embedded tunnelers that load on host OS. General intro - https://openziti.github.io/