Use zonal when you control the whole platform and can afford to rebuild integration, supplier contracts, and validation around it — typically a clean-sheet BEV. Use domain when you are carrying over ECUs, harness topology, or a supplier base, which describes most facelifts and most commercial vehicles. Nearly every real program lands somewhere in between.
Key takeaways
- Domain groups ECUs by function; zonal groups them by physical location, which is what unlocks the harness savings.
- Zonal's payoff is wiring mass and cost, ECU count, and consolidated compute and power distribution — not raw performance.
- Zonal's cost is network determinism, thermal and power budgeting inside zone controllers, and a much harder integration problem.
- Zone controllers with no central compute behind them are the worst of both worlds.
- The choice cascades into middleware, test strategy, and whether OTA is a feature or a platform capability.
- If your program cannot renegotiate supplier scope, do not attempt zonal.
How do distributed, domain, zonal, and centralized architectures actually differ?
They differ in the principle used to group functions, and each principle produces a different harness and a different software problem.
Distributed is one ECU per function, connected by CAN and LIN. Each supplier ships a black box with its own software stack. It scales by adding boxes, and it stopped scaling around the point where premium vehicles carried more ECUs than any one team could integrate.
Domain groups ECUs by functional domain — powertrain, chassis, body, infotainment, ADAS. A domain controller owns the domain's logic; satellite ECUs report to it. The harness still runs by function, so a signal from a rear-door switch still travels the length of the car to reach the body controller.
Zonal groups by physical location. A zone controller in the left rear corner handles everything electrical in that corner regardless of function — door, lamp, sensor, seat actuator — and connects to central compute over an Ethernet backbone. Because I/O terminates locally, long function-specific runs collapse into short local runs plus a backbone.
Centralized pushes almost all application logic into one or two high-performance computers, with zone controllers reduced to smart I/O and power switching. Centralized is the destination that zonal is the transport for; they are stages of one move, not competing options.
The distinction that matters: domain is a software organizing principle applied to a functional map. Zonal is a physical organizing principle applied to a wiring map. Confusing them is why some "zonal" programs deliver neither the harness savings nor the compute consolidation.
What does zonal actually buy you?
Zonal pays back in physical and structural terms, and those benefits compound over a platform's life rather than showing up as a single feature.
- Wiring harness mass and cost. The headline benefit. Terminating I/O at the nearest zone controller removes long point-to-point runs. Harnesses are among the heaviest and most labor-intensive components in a vehicle and largely hand-assembled, so shortening them cuts material, mass, and build time at once. The savings are significant but program-specific; anyone quoting a universal percentage is guessing.
- Fewer ECUs. Functions that justified their own box because they needed local I/O no longer do. That means fewer BOM line items, fewer software stacks, fewer security boundaries, and fewer suppliers in the integration critical path.
- Compute consolidation. Once applications are no longer bound to the box that owns the sensor, they can move to central compute. That is what makes resource sharing and meaningful post-SOP feature addition possible.
- Power distribution. Zone controllers can carry solid-state switching and local fusing, which supports better diagnostics, load shedding, and the redundant power paths higher automation requires.
- Manufacturing simplicity. Fewer harness variants per build combination, and a cleaner path to modular assembly.
What does zonal cost you?
Zonal moves complexity out of the harness and into the network, the thermal design, and the integration organization. It gets harder and more centralized, not smaller.
- Network determinism. Signals that used to have a dedicated bus now share an Ethernet backbone. You have to engineer determinism deliberately — TSN traffic shaping, scheduling, redundancy for safety-relevant paths. That is real network engineering, and most vehicle programs have not historically staffed for it.
- Backbone design. Topology, bandwidth headroom, failure modes, and ring or star redundancy become vehicle-level decisions made early and expensive to revisit.
- Thermal and power budgeting. A zone controller sits in a corner with poor airflow and now carries switching, compute, and heat. Derating that looks acceptable on the bench bites in hot-soak testing.
- Supplier renegotiation. Zonal breaks the black-box model. Suppliers who shipped complete functions now ship components into software you integrate, so commercial terms, IP boundaries, warranty, and ASPICE responsibility all reopen. This is usually the hardest part, and it is not an engineering problem.
- Integration difficulty. You have replaced many small independent integration problems with one large coupled one. Everything shares compute, memory, network, and power, so a regression in one function can affect another with no functional relationship to it.
Which architecture should you choose, by program type?
Match the architecture to how much of the platform you actually control. Carryover content and supplier leverage govern this decision far more than technical ambition does.
| Distributed | Domain | Zonal | Centralized | |
|---|---|---|---|---|
| Wiring | Longest; point-to-point by function | Long; function-routed to domain controllers | Short local runs plus Ethernet backbone | Shortest; backbone plus smart I/O |
| Compute | Many small MCUs, no sharing | Consolidated per domain, siloed across domains | Zone I/O plus emerging central compute | One or two HPCs; applications share resources |
| Update path | Per-ECU flashing, mostly service-bay | Per-domain OTA, limited cross-domain change | Backbone-served OTA; central compute updatable | Platform-level OTA with rollback and staged rollout |
| Integration effort | Low per ECU, high in total count | Moderate; domain boundaries contain faults | High; coupled resources, new network discipline | Highest concentration; strongest tooling required |
| Best-fit program | Legacy carryover, low-cost segments | Facelifts, ICE carryover, commercial vehicles | New BEV or dedicated software platforms | Platforms designed for continuous feature delivery |
New EV platform
Go zonal, and commit to the central compute that justifies it. You control the harness from a blank sheet, you have the mass and range incentive, and you are already renegotiating supplier scope. Half-measures here cost the entire benefit.
Facelift or carryover program
Stay domain. A facelift has neither the timeline, the harness freedom, nor the supplier leverage to absorb a topology change. Spend the effort on service-oriented interfaces and OTA capability instead — that buys most of the software flexibility without touching the wiring.
Commercial vehicle
Usually domain, sometimes selectively zonal. Long production life, high variant count, body-builder configurability, and long-tail parts support all favor stability. Where zonal helps is a standardized chassis backbone with defined interfaces to a body-builder domain.
When is zonal the wrong call?
Zonal is the wrong call more often than the industry conversation suggests. Say no when any of these is true.
- You cannot change supplier contracts. Zonal without commercial restructuring produces zone controllers that are relabeled body controllers.
- You have no central compute strategy. Zone controllers with no HPC behind them add cost and remove nothing.
- You are carrying over more than a modest share of ECUs. They bring their own I/O expectations and drag the old harness with them.
- Your validation capability is still ECU-bench-shaped. A coupled architecture needs SIL, HIL, and vehicle-in-the-loop coverage before you build it, not after.
- Your timeline has no slack for first-of-kind integration. The first zonal program on any platform costs more than the model predicts.
How does the choice cascade into middleware, validation, and OTA?
The architecture decision is really three decisions, because it determines the software platform you need underneath it.
Zonal pushes you toward service-oriented communication. Once applications are decoupled from the box that owns the sensor, signal-oriented CAN messaging stops being sufficient and you need SOME/IP or DDS with a real service discovery model. That drives the split between AUTOSAR Classic and Adaptive: real-time control stays Classic on zone controllers and safety MCUs, while POSIX-based Adaptive runs the central compute.
Validation changes shape. Domain architectures let you test a domain in reasonable isolation; zonal does not, because resource contention, network load, and thermal behavior only appear once the system is assembled. That makes virtual ECUs and early full-system SIL a prerequisite rather than an efficiency play.
OTA becomes structural. In a domain vehicle, OTA is a feature added per domain. In a zonal vehicle with central compute, OTA is how the platform is maintained, which raises the bar on update security and R156 process compliance — cross-zone dependency management, rollback that survives a zone controller failing mid-update, and campaign staging.
Zonal is not a wiring decision that happens to touch software. It is a software-defined vehicle decision that happens to change the wiring.
Frequently asked questions
Is zonal architecture always better than domain?
No. Zonal reduces harness mass and ECU count, but it only pays off if the program can also consolidate compute, redesign the network for determinism, and renegotiate supplier scope. Programs with heavy carryover content, fixed harness topology, or short timelines usually get better results from a domain architecture with strong service-oriented interfaces and solid OTA capability.
Can you mix zonal and domain in one vehicle?
Yes, and most production programs do. A common pattern is zonal body and power distribution with a retained domain controller for powertrain or ADAS, often because that domain's supplier content or safety case is not worth reopening. Hybrids are a legitimate engineering outcome, not a failure. The risk is drift — a hybrid that was never deliberately scoped becomes two architectures maintained at once.
Does zonal architecture require automotive Ethernet?
Effectively yes. Zone controllers aggregate large amounts of I/O and need to move it to central compute, which requires backbone bandwidth CAN cannot provide. Automotive Ethernet, generally with TSN for traffic scheduling and time synchronization, is the practical backbone. CAN and LIN survive as local edge networks between zone controllers and simple sensors and actuators.
How much wiring weight does zonal actually save?
It varies too much by vehicle class, feature content, and harness design to state a universal figure, and published numbers usually come from a specific program that may not resemble yours. The savings are meaningful enough to affect range and build labor on a clean-sheet platform, and close to zero on a program that retains most of its existing ECUs and their I/O.
Does zonal architecture make functional safety harder?
It changes where the difficulty sits. Isolated ECUs made freedom-from-interference easy to argue physically. Shared compute and a shared backbone require you to argue it through partitioning, network segregation, and resource budgeting instead. The safety case gets more analytical and more centralized, which is manageable if it is designed in from the start and painful if retrofitted.
What does zonal do to supplier relationships?
It replaces black-box function delivery with component delivery into software you integrate. That shifts integration responsibility, warranty exposure, and ASPICE process ownership toward the OEM. Suppliers who have built their business on complete functions will resist, and the commercial negotiation typically takes longer than the technical work. Programs that underestimate this stall in sourcing rather than engineering.
Should a commercial vehicle program go zonal?
Usually not wholesale. Long production lifecycles, high variant counts, and body-builder configurability all reward stable, well-documented interfaces over topology optimization. Where zonal helps is a standardized chassis backbone with defined service interfaces to body-builder equipment, giving upfit flexibility without rebuilding the entire electrical architecture at once.
Architecture decisions like this one are cheap to make and expensive to reverse. GEMMACON North America works with OEM and Tier-1 teams on E/E architecture definition, middleware and integration strategy, and the validation approach that has to exist before the first zonal vehicle is built. If you are weighing this trade-off on a specific program, get in touch.
