Udemy – Enterprise Zero Trust Architecture with OpenZiti 2.0

Build, scale, and operate enterprise-grade Zero Trust Network Access (ZTNA) architectures using OpenZiti 2.0. Traditional perimeter security and legacy VPNs can no longer protect modern distributed infrastructure. OpenZiti 2.0 brings programmable, high-performance, identity-driven networking directly into your applications and infrastructure. This course takes you beyond basic single-node tutorials and shows you how to design and operate real-world, production-ready Zero Trust networks from the ground up.

What You Will Learn & Build:

• OpenZiti 2.0 Internal Architecture: Master RAFT consensus in the control plane, the distributed data model, and JWT-based authentication flows.
• High Availability (HA) Control Plane: Deploy multi-node HA Controller clusters with automated leader election and quorum recovery.
• Resilient Edge Routers: Configure distributed, auto-rebalancing HA edge router meshes across multiple regions.
• Identity, PKI & Enrollment: Implement OIDC/JWT enrollment, CA hierarchies, automated certificate rotation, and token lifecycles. • Advanced Tunneling: Set up robust overlay networks across Linux (systemd), Docker containers, and production Kubernetes clusters.
• Full-Stack Observability: Stream real-time telemetry, audit trails, and circuit traces using Prometheus, Grafana, and Elasticsearch/Kibana.
• Day-2 Operations & Upgrades: Master live configuration backups, zero-downtime patch updates, and disaster recovery procedures.
• Capstone Project: Design, provision, and validate an end-to-end multi-region production Zero Trust deployment.