← All modules — full architecture
Meridian Logistics — OpenZiti 2.0 architecture
High-level design — click any component to drill into its low-level design
Module 11: Day-2 operations — backup, restore & the certificate calendar · verified against OpenZiti v2.0.3 (field build 2026-10-03)
M11 · Day-2 Ops
✕ Close
Backup set
Cert calendar
Controller / rig
read from production
restore
the dates
snapshot
db: key
Control plane (M03)
ctrl1 · ctrl2 · ctrl3 — only read
renewal timer
monthly · leafs
The backup (workstation)
m11-restore\<date> · stored like a key
M11
cert calendar
CAs 2036 · leafs 2027
MANIFEST.csv
SHA256 · 6 files
backup set
snapshot + config + PKI
Restore rig
own RG · SSH only
ctrl-restore
same version
17 · 6 · 12
= production
snapshot, not a copy · 1/min
db: read only while Raft is empty
upgrades + runbook → M12
Tip: click the control plane, the timer, the backup folder or one of its marks, the restore rig, the proof, or a concept chip.
From the course
Enterprise Zero Trust Architecture with OpenZiti 2.0
·
cawachlabs.com
·
Guides
Meridian Logistics is a fictional company. © 2026 CawachLabs · by Girish Reddy. All rights reserved. Not affiliated with or endorsed by the OpenZiti project. Icons adapted from
Lucide
(ISC, parts MIT).
Trademarks
Microsoft, Azure and Microsoft Entra are trademarks of the Microsoft group of companies. Docker is a trademark or registered trademark of Docker, Inc. in the United States and/or other countries. Kubernetes, Helm and SPIFFE are registered trademarks of The Linux Foundation in the United States and/or other countries. OpenTofu is a registered trademark of LF Projects, LLC. Ubuntu is a registered trademark of Canonical Ltd. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries. Elasticsearch and Kibana are trademarks of Elasticsearch B.V., registered in the U.S. and in other countries. Grafana is a trademark of Raintank, Inc. dba Grafana Labs. Other names belong to their owners. CawachLabs is independent and not affiliated with or endorsed by these companies.