export EXTERNAL_DNS=ec2-54-157-168-45.compute-1.amazonaws.com export EXTERNAL_IP="$(curl -s eth0.me)" export ZITI_CTRL_EDGE_IP_OVERRIDE="${EXTERNAL_IP}" export ZITI_ROUTER_IP_OVERRIDE="${EXTERNAL_IP}" export ZITI_CTRL_EDGE_ADVERTISED_ADDRESS="${EXTERNAL_DNS:-${EXTERNAL_IP}}" export ZITI_ROUTER_ADVERTISED_ADDRESS="${EXTERNAL_DNS:-${EXTERNAL_IP}}" export ZITI_CTRL_ADVERTISED_PORT=8440 export ZITI_CTRL_EDGE_ADVERTISED_PORT=8441 export ZITI_ROUTER_PORT=8442 service="private.web" private_web_server_ip=172.31.37.62 ziti edge create config "${service}.intercept.v1" intercept.v1 '{"protocols":["tcp"],"addresses":["'${service}'"], "portRanges":[{"low":80, "high":80}]}'
ziti edge create config "${service}.host.v1" host.v1 '{"protocol":"tcp", "address":"'${private_web_server_ip}'","port":80}'
ziti edge create service ${service} --configs "${service}.intercept.v1","${service}.host.v1"
ziti edge create service-policy "${service}.bind" Bind --service-roles "@${service}" --identity-roles "#${service}.binders"
ziti edge create service-policy "${service}.dial" Dial --service-roles "@${service}" --identity-roles "#${service}.dialers"
 service="private.web" ziti edge create identity user awsdockerclint -a "${service}.dialers" -o awsdockerclint.jwt
ziti edge update identity ip-172-31-38-253-edge-router -a "${service}.binders" service="ha.web" private_web_server_ip=localhost ziti edge create config "${service}.intercept.v1" intercept.v1 '{"protocols":["tcp"],"addresses":["'${service}'"], "port":8082' ziti edge create config "${service}.host.v1" host.v1 '{"protocol":"tcp", "address":"'${private_web_server_ip}'","port":8066}' ziti edge create service ${service} --configs "${service}.intercept.v1","${service}.host.v1" ziti edge create service-policy "ha.web.bind" Bind --service-roles "@ha.web" --identity-roles "#ha.web.binders" ziti edge create service-policy "ha.web.dial" Dial --service-roles "@ha.web" --identity-roles "#ha.web.dialers" ziti edge create identity user haclient -a "ha.web.dialers" -o haclient.jwt ziti edge update identity bob -a "${service}.binders" ziti edge create config "ha.web.intercept.v1" intercept.v1 '{"protocols":["tcp"],"addresses":["ha.web"], "portRanges":[{"low":80, "high":80}]}'
ziti edge create config "ha.web.host.v1" host.v1 '{"protocol":"tcp", "address":"localhost","port":8066}' ziti edge create service ha.web --configs "ha.web.intercept.v1","ha.web.host.v1" ziti edge update identity bob -a "ha.web.binders" ziti edge create config "ha.web.host.v1" host.v1 '{"protocol":"tcp", "address":"localhost","port":8066}' service="private.web" ziti edge update identity bob -a "${service}.binders" ziti edge create identity device zdew-client -o zdew-client.jwt -a "clients" ziti edge create identity device prashantclient -o prashantclient.jwt -a "prashantclient" ziti edge create identity boot-server -o boot-server.jwt -a "servers" docker cp c71c9fe1d94b:/persistent/prashantclient.json . Interview with Netfoundry | Sreekanth Hi Sreekanth, Your interview is confirmed, please login 10 minutes prior to the schedule. Login via LAPTOP is highly appreciated.  Interview with NetFoundry | Chaturbhuj Hi Chaturbhuj, Your interview is confirmed, please login 10 minutes prior to the schedule. Login via LAPTOP is highly appreciated.  ziti edge create service-edger-router-policy --name 'my-policy' --service #all --edge-router #all ziti edge create service-edger-router-policy 'my-policy' --service-roles '#all' --edge-router-roles '#all' ziti edge create service-edge-router-policy 'my-policy' --service-roles '#all' --edge-router-roles '#all' ziti edge create service-policy my-policy Dial --identity-roles '#all' --service-roles '#all' I have a doctor's appointment and will be skipping today's stand-up/sprint kickoff meetings. ClientSync project not yet migrated to JDK 19. I will be working on it . https://netfoundry.atlassian.net/browse/MOP-20939