← All modules — full architecture

Meridian Logistics — OpenZiti 2.0 architecture

High-level design — click any component to drill into its low-level design
Module 03: HA control plane · verified against OpenZiti v2.0.3
Read the guides: OpenTofu · systemd
M03 · Control plane
✕ Close
Controller PKI / trust Edge router (M04) RAFT replication Azure region
Root CA — shared trust trust domain: meridian.ziti Microsoft Azure — control plane M03 Azure East US Azure Central US Azure West Europe RAFT RAFT ctrl1 preferred ctrl2 preferred ctrl3 voter RAFT cluster · quorum 2 of 3 NETWORKING client API + ctrl :1280 · NSG ctrl4 · non-voter optional — Azure SE Asia Edge routers planned · M04
Tip: click a controller, the Root CA, the RAFT chip, networking, or the M04 edge-router mark.
From the course Enterprise Zero Trust Architecture with OpenZiti 2.0 · cawachlabs.com · Guides Meridian Logistics is a fictional company. © 2026 CawachLabs · by Girish Reddy. All rights reserved. Not affiliated with or endorsed by the OpenZiti project. Icons adapted from Lucide (ISC, parts MIT).
TrademarksMicrosoft, Azure and Microsoft Entra are trademarks of the Microsoft group of companies. Docker is a trademark or registered trademark of Docker, Inc. in the United States and/or other countries. Kubernetes, Helm and SPIFFE are registered trademarks of The Linux Foundation in the United States and/or other countries. OpenTofu is a registered trademark of LF Projects, LLC. Ubuntu is a registered trademark of Canonical Ltd. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries. Elasticsearch and Kibana are trademarks of Elasticsearch B.V., registered in the U.S. and in other countries. Grafana is a trademark of Raintank, Inc. dba Grafana Labs. Other names belong to their owners. CawachLabs is independent and not affiliated with or endorsed by these companies.