Tuesday, April 30, 2019

Re: Upgrading a CARP firewall cluster

On Tue, 30 Apr 2019 at 15:24, mabi <mabi@protonmail.ch> wrote:
[...]

> Is this safe? or could there be any incompatibilities in carp/pfsync which would prevent me to do that upgrade in two steps while keeping everything online?

CARP should be of no worries at all and PF state table's sync is
easily verified.
If after backup's upgrade-reboot it has roughly same amount of entries
you can safely demote master and repeat procedure.
Even if there were some major differences maximum what you could loose
is connections state table.

--
End of message. Next message?

No comments:

Post a Comment