xTag

镜像概览

完整引用
docker.io/openziti/ziti-router
Registry
docker.io
命名空间
openziti
仓库
ziti-router
已缓存 Tag 数
128
最近同步
07/06/2026, 10:43 AM

简介

OpenZiti Router 零信任网络路由镜像，承载加密 overlay 流量，需与 Ziti Controller 同栈部署 fabric 数据面。

详细介绍

openziti/ziti-router 运行 Ziti fabric router，在应用层建立 mTLS mesh 而不暴露传统 VPN 端口。典型用于零信任访问内网 API，与 WireGuard 相比身份与策略更细粒度。定位为网络数据面进程，需 enrollment JWT 与 controller 可达；K8s 可 DaemonSet 或 Deployment，常需 hostNetwork。

快速启动

docker run -d --name ziti-router \
  -e ZITI_CTRL_ADVERTISED_ADDRESS=controller:6262 \
  -v $(pwd)/router.env:/etc/ziti/router.env \
  docker.io/openziti/ziti-router:latest

推荐实践

docker run -d --name ziti-router \
  --restart unless-stopped \
  --network host \
  -v /opt/ziti/router:/etc/ziti \
  docker.io/openziti/ziti-router:0.32.0

核心参数说明

  • -e ZITI_CTRL_ADVERTISED_ADDRESS — Controller 地址
  • -v .../router:... — 路由配置与 identity
  • --network host — 部分链路需主机网络
  • --restart unless-stopped — 路由持续在线
  • 固定 tag — 与 Controller 版本 pin

Kubernetes

apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: ziti-router
spec:
  selector:
    matchLabels:
      app: ziti-router
  template:
    metadata:
      labels:
        app: ziti-router
    spec:
      hostNetwork: true
      containers:
        - name: router
          image: docker.io/openziti/ziti-router:0.32.0
          volumeMounts:
            - name: config
              mountPath: /etc/ziti
      volumes:
        - name: config
          secret:
            secretName: ziti-router-config
---
apiVersion: v1
kind: Service
metadata:
  name: ziti-router
spec:
  clusterIP: None
  selector:
    app: ziti-router

Enrollment 通过 Secret 注入；按站点 DaemonSet 覆盖边缘节点。

最新 Tag（20 条）

查看全部 128 个 Tag →
Tag架构推送时间大小Digest同步期望操作
docker.io/openziti/ziti-router
:main
linux/amd64linux/arm64
2026/07/01 01:25155.6 MBsha256:becf9b2467f5…
docker.io/openziti/ziti-router
:1.5.16
linux/amd64linux/arm64
2026/06/25 00:32150.9 MBsha256:a877bb5077a2…
docker.io/openziti/ziti-router
:1.5.15
linux/amd64linux/arm64
2026/05/29 10:06150.5 MBsha256:dec8f287db7a…
docker.io/openziti/ziti-router
:1.6.17
linux/amd64linux/arm64
2026/05/29 07:40153.0 MBsha256:fb9a404d9624…
docker.io/openziti/ziti-router
:1.6.16
linux/amd64linux/arm64
2026/05/28 05:43153.0 MBsha256:2943c101b310…
docker.io/openziti/ziti-router
:latest
linux/amd64linux/arm64
2026/05/27 22:41156.4 MBsha256:8372008bef6b…
docker.io/openziti/ziti-router
:2.0.0
linux/amd64linux/arm64
2026/05/21 01:57156.4 MBsha256:8372008bef6b…
docker.io/openziti/ziti-router
:2.0.0-pre15
linux/amd64linux/arm64
2026/05/19 01:59155.4 MBsha256:9bfe1683a6bf…
docker.io/openziti/ziti-router
:2.0.0-pre14
linux/amd64linux/arm64
2026/05/12 07:54157.2 MBsha256:43da849b9831…
docker.io/openziti/ziti-router
:2.0.0-pre13
linux/amd64linux/arm64
2026/05/09 01:57155.6 MBsha256:561920bac793…
docker.io/openziti/ziti-router
:2.0.0-pre12
linux/amd64linux/arm64
2026/04/28 03:34155.5 MBsha256:b484ce8a9497…
docker.io/openziti/ziti-router
:2.0.0-pre11
linux/amd64linux/arm64
2026/04/21 03:20155.3 MBsha256:a06260010a73…
docker.io/openziti/ziti-router
:1.5.14
linux/amd64linux/arm64
2026/04/12 00:02151.5 MBsha256:0761651d8995…
docker.io/openziti/ziti-router
:1.6.15
linux/amd64linux/arm64
2026/04/07 05:18152.4 MBsha256:e83950f98e74…
docker.io/openziti/ziti-router
:1.5.13
linux/amd64linux/arm64
2026/04/04 03:47151.6 MBsha256:947fb30310ea…
docker.io/openziti/ziti-router
:2.0.0-pre10
linux/amd64linux/arm64
2026/03/31 13:24154.9 MBsha256:b62584cea247…
docker.io/openziti/ziti-router
:2.0.0-pre9
linux/amd64linux/arm64
2026/03/31 04:01154.9 MBsha256:188aa148f969…
docker.io/openziti/ziti-router
:2.0.0-pre8
linux/amd64linux/arm64
2026/03/28 03:23154.9 MBsha256:1804347a14c3…
docker.io/openziti/ziti-router
:2.0.0-pre7
linux/amd64linux/arm64
2026/03/21 12:02155.3 MBsha256:58f33832bc4f…
docker.io/openziti/ziti-router
:2.0.0-pre6
linux/amd64linux/arm64
2026/03/20 00:29155.6 MBsha256:68f9df8900b3…