openziti/ziti

Features

• Cryptographic Identity Networks - Provides an identity-based mesh where cryptographic identities replace IP addresses for routing and isolation.
• Zero Trust Networking - Provides a complete zero-trust networking framework that enforces identity-based access for all network communication.
• Outbound Connectivity Agents - Eliminates open listening ports by requiring services to initiate outbound connections to the controller.
• Mesh Networking - Establishes a distributed mesh network of controllers and routers for identity-based service connectivity.
• Mesh Traffic Optimization - Relays encrypted traffic through a distributed router fabric using real-time latency and throughput optimization.
• Identity-Based Tunnels - Creates secure network tunnels bound to verified identities instead of IP addresses.
• Identity-Based Mesh Fabrics - Implements a distributed fabric of controllers and routers for identity-based encrypted traffic routing.
• Distributed Policy Management - Implements centralized orchestration of network-wide authorization rules and identity certificates.
• Embedded Networking SDKs - Provides a Zero Trust SDK to embed networking and process-to-process encryption directly into application code.
• Identity-Embedded Protocols - Embeds cryptographic identities directly into application code to achieve process-to-process end-to-end encryption.
• Process-Level Encryption - Provides an SDK-based approach for encrypted traffic and identity integration without requiring host-level agents.
• Mutual TLS Authentication - Requires every network endpoint to prove its identity using mutual TLS authentication before data exchange.
• Identity-Based Authentication - Coordinates authentication and authorization to ensure every endpoint connection is mutually authenticated.
• Identity-Based Access Control - Restricts network access to individual applications using cryptographic certificates and identity-based policies.
• Cryptographic Identity Verification - Issues unique cryptographic certificates to users and devices to ensure strong network authentication.
• Network Microsegmentation - Restricts access to specific applications using granular identity-based policies to prevent lateral movement.
• End-to-End Encryption - Applies strong cryptography to all communications to ensure data remains secure from end to end.
• Embedded Secure Connectivity - Integrates networking and encryption directly into application code via SDKs for end-to-end secure communication.
• Service Cloaking - Removes listening ports and public URLs by requiring authenticated clients to connect through a secure overlay.
• Software-Defined Perimeters - Employs a software-defined perimeter to make network services invisible to unauthorized users and scanners.
• Zero Trust Access - Connects users and devices to applications using cryptographic identities instead of traditional VPNs.
• Developer SDKs - Ships a Zero Trust SDK for embedding encryption and identity-based access control directly into application code.
• Service Cloaking - Removes open listening ports and public URLs to make services invisible to unauthorized users and internet scanners.
• Access Control Policies - Defines granular permissions and policies to restrict which identities can access specific network paths.
• VPN Alternatives - Provides a connectivity solution that eliminates open listening ports by routing traffic through an authenticated overlay.
• Legacy Application Tunneling - Provides secure connectivity to legacy applications via lightweight tunnelers without modifying the original code.
• Multi-Cloud Overlays - Creates a single overlay network across multiple cloud providers and on-premise data centers without using VPN tunnels.
• Intelligent Routing Engines - Implements an intelligent routing engine to balance security requirements with network performance across a secure overlay fabric.
• Centralized Management Interfaces - Ships a centralized graphical dashboard and API for controlling and monitoring the network overlay.
• Traffic Optimization - Directs encrypted traffic through a mesh of routers to optimize paths based on real-time latency, throughput, and cost.
• Multipath Latency Routing - Uses a mesh fabric that monitors real-time latency across multiple peer links to select the fastest path and provide automatic failover.
• Overlay Networks - Links diverse workloads across multiple cloud providers and on-premise data centers into a unified private network.
• Private DNS Resolution - Maps service names to secure overlay tunnels using authenticated private DNS resolution.
• Transparent Host Security - Extends zero trust principles to existing hosts and applications using a tunneler-based approach without code changes.
• Private - Maps service names to secure tunnels using private DNS to hide applications from the public internet.
• Transparent Network Proxies - Implements transparent network proxies that intercept and route traffic for unmodified software.
• Tunneling Proxies - Ships transparent tunneling proxies to provide secure connectivity to legacy applications without code changes.
• Zone Access Management - Secures access to applications within trusted network spaces using routers for devices that lack native tunneling capabilities.
• Network Administration Consoles - Provides a dedicated management interface for administering network identities and connectivity policies.
• Networking & Connectivity - Zero-trust, programmable network overlay.
• Overlay Networks - Zero trust overlay network for application-level security.
• Seguridad y privacidad - Zero-trust, full-mesh overlay network for secure access.
• Security & Privacy - Zero-trust, full-mesh overlay network for secure connectivity.

Historial de estrellas