Hello, Thank everyone for your support in this community :smile: Setup: Three HA controller nodes: ctrl1.ziti.home.lab:7878 ctrl2.ziti.home.lab:7878 ctrl3.ziti.home.lab:7878 The PKI was created by the doc/ha/create-pki.sh All nodes are online and ctrl1 is the leader ╭───────┬─────────────────…

I stumbled over this issue as well. However I'm surprised that your controllers were able to "clusterize". In my opinion there is an issue in the Controller Certificates page: The commands create client and server certs/keys, however they are missing an important step: Server and client cert need …

It's cleaner imo to have one key, but i wouldn't think it would matter in practicality. What should matter is that the claims present in the cert offered to connect with are correct and proper, and that the cert is signed by an expected CA. I've not personally hit this sort of problem myself where r…

Hello, thank you @TheLumberjack and @dmuensterer for responding. I have recreated the PKI chain, and brought the controllers online. I have enrolled an new edge router. Same thing happen verified and online :smile: however restarting the router displayed the same issue. not online. However I slo…

[image] 1VeryNaughtyCat: Opening up ZAC on ctrl03 (not the cluster leader at that time), the router is displayed online. However the status is not displayed on the other two ZAC's That is interesting. I wouldn't expect that, myself. [image] 1VeryNaughtyCat: I am using Ubuntu 24.01 server…

[image] 1VeryNaughtyCat: I have also noticed and interesting thing with the cluster status. If you connect to the cluster leader and query the status of the cluster, you see all nodes connected, and their status. However if you connect to either of the other slave nodes, and query, you see the l…

Hello, Thank you. @plorenz , thank you for clarifying the the cluster status. @TheLumberjack , sorry. I am using the following: The controllers are in a HA cluster and there is quorum. docker and compose for both controllers and routers. I am using crafted controller.conf, instead of the bootstra…

Hello, Thank you for your support. I have decided to go down another route and abandon using openziti HA for the near future. I have successfully created a failover environment using k3s cluster and longhorn for storage replication. Working great so far :slight_smile: . Cheers

Openziti edge router online issue in an HA setup

farmhouse May 19, 2025, 9:04am 9

The symptoms here appear to be same as my issue, resolution is in this post.

Topic		Replies	Views
Router connection to Controller, handshake failed	5	109	April 16, 2025
Edge router starting error	10	472	February 14, 2023
Running a second edge router on a different device Ziti Overlay	31	259	December 10, 2024
Failed to connect to ER (on a separate box from the controller)	5	124	August 20, 2024
Adding new router to ziti network fails Ziti Overlay	13	487	April 2, 2023

Openziti edge router online issue in an HA setup

Related topics