2.5 KiB
| sidebar_position |
|---|
| 0 |
Shares - Private
zrok was designed to securely share and access digital resources. A private share allows a resource to be
shared through a privately available endpoint local to the user accessing the resource. Privately shared resources can only be accessed by another zrok user who has the details of your unique share. You are in control of who can access your private shares by sharing the the share token.
Peer-to-peer private resource sharing is one of the things that makes zrok unique.
zrok also provides public sharing of resources with non-zrok users. Public resource sharing is limited to only resources that can be accessed over HTTP or HTTPS.
Here's how private sharing works:
Peer to Peer
private shares are accessed using the zrok access command, and require the accessing user to have a working (and enable-d) zrok account on the same service instance where the share was created.
The private share is identified by a share token, which uniquely identifies your share. The accessing user will use the share token, along with the zrok access command to create a local endpoint on their system, which lets them use the shared resource as if it were local to their system.
private sharing does not require you to open any firewall ports or otherwise compromise the security of your local system; there is never an attack surface open to the public internet. As soon as you terminate the zrok share process, you immediately terminate any possible access to your shared resource.
The shared resource can be a development web server to share with friends and colleagues or perhaps,
it could be a webhook from a server running in the cloud which has zrok running and has been instructed
to access the private resource. zrok can also share files, websites, and low-level TCP and UDP network connections using the tunnel backend. What matters is that the access to the shared resource is not
done in a public way, and can only be accessed by other zrok users that have access to your share token.
The peer-to-peer capabilities of zrok are an important property of the underlying OpenZiti network that zrok uses to provide connectivity between users and resources.
Using private shares is easy and is accomplished using the zrok share private command. Run zrok share private to see the usage output and to further learn how to use the command.