3 ms·

Thank you! > OpenZiti is not a VPN and it does not forward network packets. In application embedded cases payload is end-to-end encrypted and forwarded on over

by e12e 4y ago

Thank you! > OpenZiti is not a VPN and it does not forward network packets. In application embedded cases payload is end-to-end encrypted and forwarded on overlay network. Ok, but messages/RPC calls go over the network - can i return a 1gb video file/stream/fragment - or send real-time audio - or is it limited to more of a "secure RPC"?

ekoby 4y ago
Absolutely, from your application's view it is just a socket that can live and be used to send/receive data indefinitely
- e12e 4y ago
  I more meant: what is the network transport like - does it offer tcp-like guarantees and re-submissions, along with poor suitability for real-time streams? How does it cross firewalls (that increasingly filter by protocol)?
  - ekoby 4y ago
    at this time OpenZiti connection are guaranteed-delivery (like TCP). We are evaluating offering lossy connections in the future. At the edges connection are always outbound and are seen as mTLS to the firewalls. the application payloads are end-to-end encrypted (using libsodium) an d transferred inside mTLS channels
- deleted 4y ago
  [deleted]