Top all-time · #18979
NetFoundry
Company blog · ziti.dev/blogsecuritysystems
NetFoundry is the company blog at ziti.dev, writing about security and systems. Since 2020, 4 different Hacker News readers have linked it 12 times, most often “Easily embed private, programmable networking into your app”. It is still writing: the last post was on 2026-11-02, and you can follow it by feed.
Too few sampled comments (5) to say how often HN recommends it.?
Why HN links it
HN readers link ziti.dev, the OpenZiti site, for its overview of embedding private, outbound-only connectivity in apps, and for blog posts on zitifying SSH, Kubernetes and Spring Boot.
Summarised by Claude from a sample of 5 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- /blog/zitifying-ssh/2 people · 4 mentions · first linked 2021-07-19
- Easily embed private, programmable networking into your app2 people · 3 mentions · first linked 2021-08-26
What Hacker News says?
yep, literally shut down all inbound firewall ports and link listeners. keys are bootstrapped and you can add your own CA if desired (RFC 7030). https://ziti.dev/blog/bootstrapping-trust-part-5-bootstrappi...
Comment linking /blog/bootstrapping-trust-part-5-bootstrapping-trust/
on “Start Self Hosting”Submitted A 5-part series on bootstrapping trust as a story · 3 points
HN discussionYou can literally embed private, outbound-only connectivity into your application code using one of the many SDKs - C, Java, Go etc etc... here is a good overview https://ziti.dev/ . As you can embed inside you app, you can now build 'zitifications' which is apps which have native, private connectivity embedded both client or server side. Here are a couple of cool artciles on some we have already done: - Springboot…
Comment linking /
on “Tailscale raises $100M”Submitted Easily embed private, programmable networking into your app as a story · 2 points
HN discussionNetFoundry | REMOTE | Full-time | https://netfoundry.io Our platform enables devs to embed zero trust, high performance networking in apps via our SDKs. Embeddable networking opens a new art of the possible like: 1. mPOS apps embedding zero trust via SDK: https://ziti.dev/blog/mobile-point-of-sale-mpos-app-ziti-and... 2. Microsoft choosing us as 1 of 3 networking solutions in world to be embedded in their new privat…
Comment linking /blog/mobile-point-of-sale-mpos-app-ziti-android-java-sdk-integration/
on “Ask HN: Who is hiring? (April 2020)”very nice writeup - one of the better ones i have seen. you can go a step further and eliminate open inbound port 22 (make the sshd server 'dark' to the network) with open source solutions like this: https://ziti.dev/blog/zitifying-ssh/ disclosure: we build SaaS on top of OpenZiti (the open source) so are opinionated in this domain. and, to be clear, the above is just one layer...other layers of security still apply.
Comment linking /blog/zitifying-ssh/
on “SSH Bastion Host Best Practices”Ziti (Apache) provides bootstrapped* identity based security (and programmable, least privilege overlays). Disclosure: founder of company which sells SaaS on top of Ziti FOSS. * https://ziti.dev/blog/bootstrapping-trust-part-5-bootstrappi...
Comment linking /blog/bootstrapping-trust-part-5-bootstrapping-trust/
on “eBPF will help solve service mesh by getting rid of sidecars”Take a look at open source Ziti, it will work on any system, app or cloud - https://ziti.dev/ or https://github.com/openziti
Comment linking /
on “Zero-Trust RDP and SSH Access to VMs on Google Cloud”Here open source, general purpose version for access to any cloud or resource in fact. This is specifically for SSH but can support any protocol or app with the vanilla SDKs and tunnelers - https://ziti.dev/blog/zitifying-ssh/
Comment linking /blog/zitifying-ssh/
on “Zero-Trust RDP and SSH Access to VMs on Google Cloud”We use ZSSH based on OpenZiti so that the SSH client itself has zero trust, private connectivity embedded in the SSH client (i.e., clientless) - https://ziti.dev/blog/zitifying-ssh/
Comment linking /blog/zitifying-ssh/
on “Simple SSH Security”Makes sense. Ziti could still be used on the dataplane to provide higher security on top of Cilium. Could be worth having a chat with the team from Ziti, I know they are always interested to chat on things they can zitify - e.g., https://ziti.dev/blog/kubernetes/ https://github.com/openziti-test-kitchen They hang out here - https://openziti.discourse.group/
Comment linking /blog/kubernetes/
on “Launch HN: Plural – Multi-Cloud OSS Application Deployments on Kubernetes”a quick overview: https://ziti.dev/blog/zitifying-ssh/
Comment linking /blog/zitifying-ssh/
on “Show HN: Zero Trust SSH (ZSSH)”