zrok is Growing Up

zrok has been growing pretty steadily throughout 2024. As we've grown, we've started having to deal with abuse, phishing, and other similar types of issues showing up on the service at zrok.io.

Over the last weeks, the team has worked together to figure out the best compromise to continue offering our users the best free sharing solution possible, while also offering a reasonable level of protection against abuse. We've batted around a number of different ideas.

The solution we've settled on is to introduce an "interstitial page" for free-tier accounts using public sharing. The interstitial page will be shown the first time an internet user visits a zrok public share (with a timer resetting every week). The page is there to make sure that the user visiting your share is very clear that the web resource they're visiting is shared through zrok, and very likely not a financial institution (or at least that they should be careful with personal information).

The interstitial page is designed to only be displayed to interactive clients (web browsers presenting with a User-Agent header starting with Mozilla/5.0). Other clients like curl, or HTTP clients from various programming langues will bypass the interstitial page.

zrok users who upgrade to any paid tier (see pricing) will not have an interstitial page presented on their shares. The interstitial pages feature does not impact private zrok sharing in any way. When you zrok access private a share and create a private frontend, that frontend does not present interstitial pages. In those cases, we're pretty confident the user understands what they're accessing.

We're also actively working on bringing some additional capabilities to the zrok paid offerings, including "bring your own domain" support, which will allow users to create public shares using their own domain name. So, we're kind of hoping you might want to consider one of those options outside of removing the interstitial page.

💡

We're expecting to enable the interstitial pages feature globally for all free-tier zrok users starting on Thursday, August 8th.

If you're a self-hoster, you'll have extensive options to customize the interstitial page configuration. Each public frontend can enable or disable interstitial support, and interstitial pages can be disabled on a per-account basis.

I recently did a short zrok Office Hours video about the interstitial pages feature:

https://www.youtube.com/watch?v=NYjec5mIXTE&list=PLMUj_5fklasLuM6XiCNqwAFBuZD1t2lO2&index=24

We appreciate every zrok user. Thank you for your support and attention. If you appreciate what we're doing with zrok, it always means a lot when you can drop a star on the zrok repo on GitHub.

If you have any questions or concerns, feel free to reach out on the OpenZiti discourse using the zrok topic.

zrok is Growing Up

Comments

zrok

zrok Custom Domains

More from this blog

Secure Your Kubernetes Workloads with Ephemeral Zero-Trust Identities

Bake It In: Building Agent Runtimes on Zero Trust from Day One

Dark Model Endpoints: Private LLM Meshes for Regulated Industries

You Can't Govern What You Can't See

The Gap Between "Agents Can Talk" and "Agents Should Talk"

Command Palette

Comments

zrok

zrok Custom Domains

More from this blog