Step 4: After installation
With your Ziti network installed and verified, you're ready to start building on it. This page covers essential day 2 operations and points you to additional resources.
Manage your network with ZAC
The Ziti Admin Console (ZAC) is your primary interface for managing the Ziti network. From ZAC you can create and manage identities, services, policies, and edge routers. For a general introduction to Ziti concepts, see the OpenZiti documentation.
Add edge routers
The installer deploys one default edge router alongside the controller. For production environments, you will likely need additional routers to improve performance, redundancy, or regional coverage.
- To add routers, use ZAC or the Ziti CLI/API.
- For detailed guidance, see the OpenZiti deployment guides.
Create identities and services
Identities represent the endpoints (devices, applications, servers) that connect to your Ziti network. Services define what those identities can access.
- Use ZAC to create identities and services through the UI.
- For programmatic or automated workflows, see the OpenZiti API reference.
Connect clients
End users connect to the Ziti network using Ziti endpoint software. For setup instructions across all supported platforms, see the OpenZiti tunneler reference.
Set up backups
Configuring backups should be a priority after verifying your installation. NetFoundry Self-Hosted provides automated backup tooling built on Velero with S3 storage.
S3 is currently the only natively supported backup target. Documentation for S3-compatible storage options (such as MinIO) is in progress.
Monitor with the support stack
If you installed the NetFoundry support stack, you have access to pre-configured monitoring and logging tools:
- Grafana: Dashboards for network telemetry and metrics
- Kibana: Searchable logs and raw telemetry data
- RabbitMQ: Message buffer for Ziti metrics and events
These tools are accessible over Ziti using the edge tunnel. For details on the support stack components, see the support stack overview.
Keep your installation up to date
NetFoundry Self-Hosted provides a guided upgrade script that manages version compatibility between the Ziti controller, routers, and helm charts.
Advanced configuration
- FIPS compliance: Run OpenZiti in FIPS-compliant mode for regulated environments
- Proxy configuration: Additional setup for corporate proxy environments