Tunneler Config Type intercept.v1

A Config of Config Type intercept.v1 configures an intercepting Ziti tunneler as a proxy for a particular Ziti service.

Examples

This Config instructs the tunneler to intercept any outgoing traffic with destination tcp:acme.example.ziti:5000. An intercepting tunneler provides a DNS nameserver that resolves authorized Ziti services' domain names.

{
    "protocols": [
        "tcp"
    ],
    "addresses": [
        "acme.example.ziti"
    ],
    "portRanges": [
        {
            "low": 5000,
            "high": 5000
        }
    ]
}

This Config has not only a Ziti domain name destination acme.ziti for which traffic is intercepted, but also a wildcard domain and an IP subnet. Additionally, there is a range of destination ports for which all packets will be intercepted if their destination address also matches.

{
    "addresses": [
        "acme.ziti",
        "*.dazzle.acme.ziti",
        "10.0.0.0/8"
    ],
    "portRanges": [
        {
            "low": 1025,
            "high": 1999
        }
    ],
    "protocols": [
        "tcp"
    ]
}

Schema Reference

The JSON schema for this tunneler Config Type is maintained in GitHub.