OpenZiti Tech Blog
npub17z8dllfxdyez6lnt9fcdcj42xdzcg8h322k7zk284w879k0uc8vq2t72m6@drss.io
Discussion of OpenZiti, the open source platform developed by NetFoundry for building secure, zero-trust connectivity into any application or network
Follow into
Secure Your Kubernetes Workloads with Ephemeral Zero-Trust Identities
Save into
7 Jul 2026
Creating connectivity across systems is painful. Ask me how I know! It might be a scheduled job that needs data from a database two clusters over, an AI agent that has to call an internal tool in a di
Bake It In: Building Agent Runtimes on Zero Trust from Day One
Save into
23 Jun 2026
If you're building an agent harness, whether it's a product you sell or an internal runtime for your organization, architectural decisions you make early can be expensive to change later. Most teams f
Dark Model Endpoints: Private LLM Meshes for Regulated Industries
Save into
19 Jun 2026
Banks, defense contractors, and government agencies are all adopting LLMs. Most run on managed services such as Azure OpenAI with BAA, Bedrock with PrivateLink, Vertex AI in a customer VPC. Some also
You Can't Govern What You Can't See
Save into
16 Jun 2026
What does it take to answer "what did agent X do yesterday?" in your environment? For most platform teams running AI infrastructure today, it means pulling up an LLM gateway dashboard, an MCP proxy lo
The Gap Between "Agents Can Talk" and "Agents Should Talk"
Save into
10 Jun 2026
Multi-agent AI is moving fast. Frameworks like LangGraph, CrewAI, and AutoGen make it straightforward to wire up agents that collaborate within a single application. Emerging protocols like Google's A
Containing the Blast Radius: Network-Level Isolation for AI Agents
Save into
9 Jun 2026
Application-level isolation constrains what the agent can do on its host. Network-level isolation constrains what the agent can reach beyond it. Host isolation gets most of the sandboxing attention. N
AI SecOps: Why Your AI Infrastructure Has a Network-Shaped Blind Spot
Save into
4 Jun 2026
If you're responsible for an enterprise AI platform, you've probably deployed an AI gateway by now. Something that proxies LLM requests, manages API keys, tracks costs, runs some guardrails on prompts
Announcing OpenZiti v2.0
Save into
20 May 2026
It's been over a year since we at NetFoundry announced OpenZiti v1.0, and a lot has happened since then. The community has grown, the platform has matured, and the demands on zero-trust networking hav
Inside NetFoundry docs: Streamline doc freshness with AI
Save into
27 Apr 2026
At NetFoundry, we're building the foundational architecture for zero-trust networking with OpenZiti (our programmable zero-trust overlay). My job is to keep the docs fresh, easy to consume, and techni
Comparing Open Source LLM Gateways
Save into
26 Mar 2026
If you're running multiple LLM providers and want a single API in front of them, you have options. This post compares open source LLM gateways, including our own OpenZiti llm-gateway. We'll try to be
How to Automate OpenZiti SDK Integration Using a 4-Phase AI Skill
Save into
25 Mar 2026
Embedding the OpenZiti SDK into an existing service is a good idea in theory and a grind in practice. You need to understand the SDK patterns for the language, find every call site where a raw TCP lis
What Is ziti-mcp-server? OpenZiti's Full Management API for AI Agents
Save into
25 Mar 2026
AI agents are getting tool access to infrastructure faster than most security teams have thought through what that means. If you run OpenZiti, you now have a specific, well-scoped answer to "how
Introducing zrok v2.0
Save into
23 Mar 2026
Today we're releasing zrok v2.0.0, and I'm really excited about it. When we shipped v1.0 last year, it was about proving that zrok was production-ready... a solid foundation with a redesigned web cons
Using SPIRE as a Trusted Authority for OpenZiti Identities
Save into
23 Mar 2026
Introduction Identity management is central to modern network security. This post shows how to use short‑lived X.509 client certificates from SPIRE — the reference runtime for SPIFFE (Secure
Getting Metrics from Your OpenZiti Controller over WebSockets
Save into
16 Mar 2026
A topic came up on the OpenZiti Discourse about subscribing to controller events over WebSockets. I've been doing exactly this in a side project that needed to show some usage data for a Ziti network,
Host a dark service with Java, Spring Boot, and OpenZiti
Save into
11 Feb 2026
Hide your application services to protect them against hackers. This article’s headline mentions hosting a dark service. Huh? Why would you want your application services to be dark? Open ports are
OpenZiti Drinks Its Own Champagne
Save into
25 Nov 2025
Management Plane Goes Zero-Trust TL;DR: Starting with OpenZiti 1.8, controller APIs can bind as OpenZiti services. The same app-embedded zero-trust that secures your applications now secures the
Introducing zrok 1.0
Save into
9 Apr 2025
What does version 1.0 mean? It’s always a big deal when a project releases “version 1.0”. Our version 1.0 release validates all of the good things about zrok while improving a few areas that
