Hi Yashpal, QA Env: We have almost similar kind of QA env. matching with Production one....so firstly we apply any OS/software patch to QA Env. and test it for 2-3 weeks by diff. ways like one way we used is to run(replay) Apache access logs taken from Production Env. using JMETER etc. and we have Monitoring tools through which we are able to compare the existing performance of different parameters + do Exception monitoring(to look for any new Exception etc..)
If we need a Quik Fix...(ie...in Case of emergency).... We first test the new os/software patch in 2 diff env. called: 1.) Non-Live Staging Env: Here we take Prod. server OOS(out of service)ie..not serving live traffic and apply patch and do a sort of similar test what we do in QA Env. 2.) Live Staging Env: Here we make Non-Live Staging servers(on which we had already aaplied the PATCH)..IS (In Service)...means serving Traffic. Dont' run any test..like replay of access logs etc...as no need...as traffic is coming and we only monitor various parameters After we have GREEN signal ...ie..when we ensured that everything is FINE...we go and apply PATCH to all needed Production/Live servers. Any other better way U know...please share...Thanks a lot!!!! - Piyush On 9/17/07, Yashpal Nagar <[EMAIL PROTECTED]> wrote: > > Hi All > > What kind of practice is followed, to apply the patches to production > servers, development servers, hosted mainly on Linux. > > Currently, we have mix of enterprise class Linux systems, scattered > across multiple networks/locations. We have software repositories to get > the patches, on the target box and apply them manually. > > I believe one should not apply the patches frequently on production > servers, unless you really require them and recognise to fix a flaw. On > security side, none of our boxes is directly connected to insecure > network and there are separate firewall devices to take care of external > threats. If suppose, i have a apache box running only web services, is > it considered good to apply all available patches related to apache? > > Please share some information, how you manage production servers in > terms of OS patches, frequency of applying them, how much old patches > generally are applied? > > Regards, > Yash > > > _______________________________________________ > ilugd mailinglist -- [email protected] > http://frodo.hserus.net/mailman/listinfo/ilugd > Next Event: http://freed.in - September 28-29, 2007 > Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi > http://www.mail-archive.com/[email protected]/ > -- Thanks & Regards, -Piyush Mo.: 091-9891431061 Mail: [EMAIL PROTECTED], [EMAIL PROTECTED] Web: http://www.harQuch.com _______________________________________________ ilugd mailinglist -- [email protected] http://frodo.hserus.net/mailman/listinfo/ilugd Next Event: http://freed.in - September 28-29, 2007 Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi http://www.mail-archive.com/[email protected]/
