Re: [pfSense] 2.2.6 HA to 2.3 Upgrade Advice

[Mike Montgomery]

Thanks, I am now update to date.  Guess I was just trying to over
complicate things, everything upgraded without any quirks at all.



On Wed, May 11, 2016 at 8:22 AM, Vick Khera  wrote:

> On Tue, May 10, 2016 at 4:55 PM, Mike Montgomery  >
> wrote:
>
> > I have two servers, setup in high availability that are currently running
> > 2.2.6.  I have been running 2.3 at home and my test servers and am ready
> to
> > upgrade the office to 2.3 as well.  I have been reading several upgrade
> > guides, as to which one to upgrade first, but would like to see if anyone
> > has upgraded a HA setup yet successfully?
> >
>
> Here is how I upgrade mine, whatever the upgrade versions:
>
> 1) upgrade the backup firewall
> 2) on primary, in CARP Status, enter persistent backup mode (the button on
> the right side of the top row)
> 3) wait a moment or two to let the VPNs and traffic move from the primary
> to the backup (usually a few seconds at most)
> 4) upgrade primary at your leisure
> 5) on primary, un-click the persistent backup mode button.
>
> This usually works really well. However, when I did this 2.2 -> 2.3 upgrade
> Monday at my data center, my terminal window into my management server had
> its ssh connection severed right when the primary was booted. I suspect
> there is some race between the networking starting and the thing that sets
> the persistent backup mode, but this only happened to me once.
> ___
> pfSense mailing list
> https://lists.pfsense.org/mailman/listinfo/list
> Support the project with Gold! https://pfsense.org/gold
>
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] 2.2.6 HA to 2.3 Upgrade Advice

[Vick Khera]

On Tue, May 10, 2016 at 4:55 PM, Mike Montgomery 
wrote:

> I have two servers, setup in high availability that are currently running
> 2.2.6.  I have been running 2.3 at home and my test servers and am ready to
> upgrade the office to 2.3 as well.  I have been reading several upgrade
> guides, as to which one to upgrade first, but would like to see if anyone
> has upgraded a HA setup yet successfully?
>

Here is how I upgrade mine, whatever the upgrade versions:

1) upgrade the backup firewall
2) on primary, in CARP Status, enter persistent backup mode (the button on
the right side of the top row)
3) wait a moment or two to let the VPNs and traffic move from the primary
to the backup (usually a few seconds at most)
4) upgrade primary at your leisure
5) on primary, un-click the persistent backup mode button.

This usually works really well. However, when I did this 2.2 -> 2.3 upgrade
Monday at my data center, my terminal window into my management server had
its ssh connection severed right when the primary was booted. I suspect
there is some race between the networking starting and the thing that sets
the persistent backup mode, but this only happened to me once.
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] 2.2.6 HA to 2.3 Upgrade Advice

[Steve Yates]

https://doc.pfsense.org/index.php/Upgrade_Guide#Upgrading_High_Availability_Deployments

"Generally the recommended path for upgrading a High Availability cluster is to 
first upgrade the secondary node."

--

Steve Yates
ITS, Inc.

-Original Message-
From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Mike Montgomery
Sent: Tuesday, May 10, 2016 3:55 PM
To: pfsense mail list <list@lists.pfsense.org>
Subject: [pfSense] 2.2.6 HA to 2.3 Upgrade Advice

I have two servers, setup in high availability that are currently running 
2.2.6.  I have been running 2.3 at home and my test servers and am ready to 
upgrade the office to 2.3 as well.  I have been reading several upgrade guides, 
as to which one to upgrade first, but would like to see if anyone has upgraded 
a HA setup yet successfully?

What I am looking at doing, is disable carp, and upgrade the master after I 
make backups, and take a snapshot of the machines to roll back to if needed 
(they are vm's).  Then once everything is upgraded on master, allow carp to 
switch back, then upgrade secondary.

Should this work?  Going from 2.2.6 to 2.3, if I do the master first, do I need 
to disable the sync from master until the secondary is upgraded as well?  Have 
not seen much specified for 2.3, only 2.1 to 2.2 upgrades.

Thanks
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

[pfSense] 2.2.6 HA to 2.3 Upgrade Advice

[Mike Montgomery]

I have two servers, setup in high availability that are currently running
2.2.6.  I have been running 2.3 at home and my test servers and am ready to
upgrade the office to 2.3 as well.  I have been reading several upgrade
guides, as to which one to upgrade first, but would like to see if anyone
has upgraded a HA setup yet successfully?

What I am looking at doing, is disable carp, and upgrade the master after I
make backups, and take a snapshot of the machines to roll back to if needed
(they are vm's).  Then once everything is upgraded on master, allow carp to
switch back, then upgrade secondary.

Should this work?  Going from 2.2.6 to 2.3, if I do the master first, do I
need to disable the sync from master until the secondary is upgraded as
well?  Have not seen much specified for 2.3, only 2.1 to 2.2 upgrades.

Thanks
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold