mrok 0.10.2

MPT Extensions OpenZiti Orchestrator

mrok

mrok provides the communication channel that allows the Marketplace Platform Extensions to securely expose their web applications to the platform without requiring inbound connectivity. It uses the OpenZiti zero-trust network overlay to create encrypted tunnels initiated from the Extension side, enabling operation even behind corporate firewalls.

Components

• Controller – A REST API that simplifies OpenZiti configuration. It lets other platform services create and manage Extensions (Ziti services) and Instances (Ziti identities).
• Agent – Runs alongside an extension in two modes:
  • Sidecar mode: proxies traffic between the Ziti network and a local TCP or Unix socket.
  • Embeddable mode: integrates with ASGI servers (e.g. Uvicorn) to serve a Python application directly.
• Frontend - Proxies internet request to a specific extension through the OpenZiti network.
• CLI – A command-line tool for administrative tasks and for running the agent in either mode.

Key Features

• Secure, outbound-initiated connectivity for Extension web apps.
• Zero-trust networking with automatic balancing across Extension instances.
• Simple API and CLI for managing services and identities.

Development

The included docker compose starts a local Ziti Network (controller + router) and mrok (controller and frontend).

License

Apache 2.0