Mirror of forum.nim-lang.org

11802 :: Openziti (zero trust networking)

• firyx (orginal) [2024-06-20T09:45:09+02:00] view original

  Hi,

  I'm new to Nim.

  I'm developing a multi-platform desktop app (Windows/Linux/Mac) that would be running at my clients' PCs and I'm considering to connect to external servers (under my control) using zero trust networking via OpenZiti from inside my app:

  • https://openziti.io/
  • https://openziti.io/docs/learn/introduction/

  I haven't found any OpenZiti usage or module in Nim lang.

  How hard would it be for a novice Nim developer (like me), who never developed in C, to use Nim's FFI to C to use OpenZiti C SDK?

  • https://openziti.io/docs/reference/developer/sdk/clang/
  • https://github.com/openziti/ziti-sdk-c

  Any hints are welcome :)

---

• Clonk (orginal) [2024-06-20T10:53:46+02:00] view original

  Hi,

  C FFI is very easy in Nim. There is essemtially 3 way of doing it :

  • Manually wrap the thing you need.
  • Use c2nim to generate a starting point for your bindings and work from there
  • Use futhark to generate bindings automatically at compile-time.

  Example of C library wrqpped :

  • https://github.com/SciNim/nimfftw3/tree/master
  • https://github.com/nim-lang/nim-zmq/tree/master/zmq
  • https://github.com/nim-lang/zip

---

• firyx (orginal) [2024-06-20T11:32:36+02:00] view original

  Hey Clonk,

  thanks for the tips!!!

  futhark looks like the thing to try first.

  This opened the whole universe for me :)

  Now I need to learn how do I statically include OpenZiti C lib into Nim executable.

---

• PMunch (orginal) [2024-06-20T20:15:55+02:00] view original

  I would recommend Futhark as well. Manual wrapping is tricky to get right even if you know C, and c2nim is fairly unmaintained and can create some bad results on certain inputs (granted for a header you might be fine). To put it like this, I wrote Futhark because I was tired of wrestling with manual wrappers and c2nim.

  The static linking should be fairly easy, although easier still might be to just ship a dynamic library. Depend on OpenZdti though, haven't looked at it.

---