Skip to main content
Architecture

How Clustron Zaris fits your infrastructure

A self-coordinating, replicated in-memory data plane you embed and run yourself — with a built-in console and manager, and no external coordinator to operate. On Kubernetes, Docker, Windows, or any cloud.

The shape of it

One data plane, coordinated by itself

Clients talk to the nodes directly with a single connection string. The nodes form a cluster, replicate partitions, and heal themselves — while the console and manager observe from the side.

Your applicationszaris://host1,host2/store · one connection string · seed list + automatic failoverDATA PLANE · self-coordinating (Nodus)zaris-0partitions P0 · P2ʳZaris store engineSecurity · mTLS + tokensMetrics · rolling statszaris-1partitions P1 · P0ʳZaris store engineSecurity · mTLS + tokensMetrics · rolling statszaris-2partitions P2 · P1ʳZaris store engineSecurity · mTLS + tokensMetrics · rolling statsreplication · RF copies per partitionMANAGEMENT PLANEConsoledashboards · partitions · data · securityManager (attach)adopts the cluster · issues certs · metrics sink
The building blocks

Four composable cores, one store

Zaris is what you get when Clustron's building blocks are composed into one distributed store — each solving a hard part of running software across more than one machine.

Clustron Zaris

Distributed store (data plane)

Partitioned, replicated in-memory key-value store. Owns the data path: puts, gets, transactions, watches, leases, counters and TTL — served straight from the node that owns each partition.

Clustron Nodus

Clustering core

Peer-to-peer membership, leader election and typed messaging. This is why there is no ZooKeeper, etcd or Consul to run — the cluster coordinates itself.

Clustron Security

Identity & trust

Mutual TLS with four CA/trust models, offline-verified bearer tokens and deny-by-default RBAC — the same trust fabric across the data plane and the console.

Clustron Observability

Metrics core

Low-allocation rolling metrics on the hot path — rates, gauges and runtime stats — pushed to the manager and exportable over OTLP.

The data path

Available by design, not by bolt-on

  • No single point of failureEach partition is replicated (RF copies) across nodes. Lose a node and a surviving replica keeps serving; the map only regenerates when every copy of a partition is gone.
  • Scales horizontallyAdd pods and the partition map grows onto them — a plain kubectl scale with Kubernetes discovery. The client learns the new topology automatically.
  • Self-healing convergenceA live-peer reconciler converges a cold-started or partially-joined cluster to the real membership, and re-replicates under-covered partitions back to full RF.
console · clustron zaris
Partition ownership and replication across nodes
Deploy anywhere

Self-hosted, on your infrastructure

Clustron Zaris runs entirely inside your environment — your data never leaves it. The same cluster, the same connection string, on whatever you already run.

Kubernetes

Official Helm chart: StatefulSet + headless Service, hot kubectl scale, per-pod external Services, and mounted-secret or enrollment TLS.

Docker & Compose

Ready-made compose files for a multi-node cluster and a secured (token + TLS) demostore — one command to a running cluster.

Windows & cloud VMs

Runs as a plain process from a config file on Windows or any VM. The same connection string reaches it from anywhere.

console · clustron zaris
Clustron Zaris console dashboard — cluster-wide overview
console · clustron zaris
Security & TLS configuration in the console
Security

Trust that spans the whole cluster

  • Mutual TLS, four CA modelsAuto/co-located, bring-your-own CA, intermediate CA, or pre-issued leaves. Node↔node is mutual; the client data plane is server-auth with token identity.
  • Token authenticationOffline-verified bearer tokens — no round-trip to an auth server on the hot path. Pass them safely via env: or file: references in the connection string.
  • Deny-by-default RBACRole-based access control across stores and admin operations, enforced at the node and surfaced in the console.
Observability

Every operation, in real time

Throughput, replication, latency, memory and eviction — live in the console and exportable over OTLP to the stack you already run.

console · clustron zaris
Live metrics: operations per second, replication, latency and memory
For architects

Frequently asked

Does Clustron Zaris need an external coordinator?

No. Clustering, leader election and messaging are built in via Nodus. There is no ZooKeeper, etcd or Consul to stand up, secure and operate.

How do clients connect?

With a single connection string — zaris://host1,host2/store (or zariss:// for TLS). The hosts are a seed list with failover; the client then learns the full topology from the cluster. The store name in the path is the cluster id.

How does it scale, and is it lossless?

Scaling out is a hot kubectl scale with Kubernetes discovery — new pods join and the partition map grows onto them with no restart and no data loss. Scale in one step at a time so replication can re-establish RF between steps.

Can clients outside the cluster connect?

Yes. Enable external access and each node advertises an externally-reachable address (Kafka-style advertised addresses) via a second listener, with one Service per pod. Secure it with TLS whose certificate SAN carries the external hostname.

In-process or clustered?

Both, with the same code. Run an embedded in-process store for development and tests, then point the same client at a real multi-node cluster in production.

How is it observed?

Every cluster ships with the web console (real-time throughput, partitions, node health, data and security) and nodes export metrics over OTLP to your existing stack.

Design your cluster with us

From a single embedded store to a secured, multi-node Kubernetes deployment — the docs and the team are here.