topic Re: Hotfix install on cluster with load sharing in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Hotfix-install-on-cluster-with-load-sharing/m-p/26198#M2049 <HTML><HEAD></HEAD><BODY><P>I would definitely do both at the same time. As in not leaving 2 days in-between. Then uninstall hotfix or restore snapshot as you suggested yourself. Which is your current version and which hotfix are you installing?</P></BODY></HTML> Tue, 22 Jan 2019 19:08:36 GMT Kaspars_Zibarts 2019-01-22T19:08:36Z Hotfix install on cluster with load sharing https://community.checkpoint.com/t5/Firewall-and-Security-Management/Hotfix-install-on-cluster-with-load-sharing/m-p/26197#M2048 <HTML><HEAD></HEAD><BODY><P>I pretend do install an hotfix R80.10 on a cluster environment with 2 GW.</P><P>When it is a ClusterXL HA, you install in the backup node, CU failover to backup node, and let it work 1 or 2 days. If there is no issue, the hotfix is installed on the main node.</P><P>With this approach there are 1 or 2 days the versions mismatch on the Cluster, so in this period failovers are avoided and if a failover happens, there could be some service degradation.</P><P>When the cluster is in load-sharing mode, I suppose the 1-2 days of different versions is something to be avoided at all cost, correct?</P><P>In this case, how can we proceed?</P><P>Update both at the same time? In case of issues, the hotfix must be uninstalled or use a previous snapshot.</P><P>Which one will be updated first? The pivot or the other?</P><P>The load share can be changed from 30/70 to 0/100 or 100/0, but this changes the database, which is something that I like to avoid.</P><P>Or should we convert to ClusterXL HA, do the "normal" update, and the convert again to load-sharing?</P><P>Which is the best procedure for hotfix update/install on load-sharing clusters?</P></BODY></HTML> Tue, 22 Jan 2019 10:26:42 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Hotfix-install-on-cluster-with-load-sharing/m-p/26197#M2048 Rui_Pereira1 2019-01-22T10:26:42Z Re: Hotfix install on cluster with load sharing https://community.checkpoint.com/t5/Firewall-and-Security-Management/Hotfix-install-on-cluster-with-load-sharing/m-p/26198#M2049 <HTML><HEAD></HEAD><BODY><P>I would definitely do both at the same time. As in not leaving 2 days in-between. Then uninstall hotfix or restore snapshot as you suggested yourself. Which is your current version and which hotfix are you installing?</P></BODY></HTML> Tue, 22 Jan 2019 19:08:36 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Hotfix-install-on-cluster-with-load-sharing/m-p/26198#M2049 Kaspars_Zibarts 2019-01-22T19:08:36Z Re: Hotfix install on cluster with load sharing https://community.checkpoint.com/t5/Firewall-and-Security-Management/Hotfix-install-on-cluster-with-load-sharing/m-p/26199#M2050 <HTML><HEAD></HEAD><BODY><P><SPAN style="font-size: 12.0pt; color: black;">Being a cluster LB with 2 GW, leaving 2 days between will lead to 30% of load with an older HF, and 70% of the load with the new HF, which in case of issues can be difficult to troubleshoot.</SPAN></P><P></P><P style="background-color: transparent; color: #3d3d3d; font-family: Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; font-size: 15px; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; -webkit-text-stroke-width: 0px; white-space: normal; word-spacing: 0px; word-wrap: break-word; padding: 0px; margin: 0px;"><SPAN style="font-size: 12.0pt; color: black;">Current version: R80.10 Take 421 with HF 56.</SPAN></P><P style="background-color: transparent; color: #3d3d3d; font-family: Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; font-size: 15px; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; -webkit-text-stroke-width: 0px; white-space: normal; word-spacing: 0px; word-wrap: break-word; padding: 0px; margin: 0px;"><SPAN style="font-size: 12.0pt; color: black;">To install: HF 169.</SPAN></P></BODY></HTML> Wed, 23 Jan 2019 14:20:43 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Hotfix-install-on-cluster-with-load-sharing/m-p/26199#M2050 Rui_Pereira1 2019-01-23T14:20:43Z Re: Hotfix install on cluster with load sharing https://community.checkpoint.com/t5/Firewall-and-Security-Management/Hotfix-install-on-cluster-with-load-sharing/m-p/26200#M2051 <HTML><HEAD></HEAD><BODY><P>Exactly. That's why doing both is much better idea </P></BODY></HTML> Wed, 23 Jan 2019 19:48:39 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Hotfix-install-on-cluster-with-load-sharing/m-p/26200#M2051 Kaspars_Zibarts 2019-01-23T19:48:39Z