← All modules — full architecture

Meridian Logistics — OpenZiti 2.0 architecture

High-level design — click any component to drill into its low-level design
Module 13: The capstone — a second region (Azure Southeast Asia, 5 VMs) · field-built on OpenZiti v2.0.6, 2026-10-06; built and removed inside the lab
M13 · Capstone
✕ Close
Controller Edge router Tunneler (VM) join link / dial hosting policy / acceptance Azure region
Region two — Azure Southeast Asia M13 vnet-…-sea-01 (10.40.0.0/16) · 5 VMs Data plane · private, dial-out only Control plane · non-voter links out :3022 join · --non-voting host #2 The model — no forks erp-apac · #er-sea service policies unchanged Public routers (M04) er-pub-01 · er-pub-02 the SEA routers' way in Control plane (M03) + ctrl4 3 voters (US/EU) + 1 SEA non-voter quorum math unchanged · back to 3 after depot linux-fleet-ap-01 er-sea-01 / 02 --private · #er-sea wms-ap ziti-host-wms-ap-01 ctrl4 vm-ctrl4-lab-sea-01 Built, then removed apac module · 21 resources ctrl4 out of the cluster first Service HA — smartrouting 1 service · 2 hosts 3 routers each, picked at start The acceptance check SEA: 200 · r/er-sea-01 · ~0.017 s the APAC page · no link crossed placement: none · 4th voter · non-voter ✓ path cost = routers + links + terminator course complete · M03 → M13
Tip: click the model, the public routers, the control plane, ctrl4 (the non-voter), the depot / router / WMS-host mark, the region, service HA, the acceptance check, the build-and-remove card, or a concept chip.
From the course Enterprise Zero Trust Architecture with OpenZiti 2.0 · cawachlabs.com · Guides Meridian Logistics is a fictional company. © 2026 CawachLabs · by Girish Reddy. All rights reserved. Not affiliated with or endorsed by the OpenZiti project. Icons adapted from Lucide (ISC, parts MIT).
TrademarksMicrosoft, Azure and Microsoft Entra are trademarks of the Microsoft group of companies. Docker is a trademark or registered trademark of Docker, Inc. in the United States and/or other countries. Kubernetes, Helm and SPIFFE are registered trademarks of The Linux Foundation in the United States and/or other countries. OpenTofu is a registered trademark of LF Projects, LLC. Ubuntu is a registered trademark of Canonical Ltd. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries. Elasticsearch and Kibana are trademarks of Elasticsearch B.V., registered in the U.S. and in other countries. Grafana is a trademark of Raintank, Inc. dba Grafana Labs. Other names belong to their owners. CawachLabs is independent and not affiliated with or endorsed by these companies.