- CheckMates
- :
- Products
- :
- CloudMates Products
- :
- Cloud Network Security
- :
- Discussion
- :
- High Availability Cluster Launch in GCP without us...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
High Availability Cluster Launch in GCP without using Wizard?
We're currently deploying a new CheckPoint R80.40 HA cluster each time we add a new GCP region, which is every 1-2 months. I've noticed even after 3 years, the wizard is still a bit buggy/error prone. I particular, it requires removing the default IP addresses from each interface, otherwise new networks will be created even when a pre-existing network has been selected:
Also, if more networks existing in the project than are selected, there will be an error and all 6 internal interfaces must have networks defined even if only 1 is used:
Is it possible to deploy the clusters/gateways via CLI, YAML file, or Terraform? I'm trying to see if we can smooth out the process
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
you can found Terraform templates here:
https://github.com/CheckPointSW/CloudGuardIaaS/tree/master/terraform/gcp
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Not aware of a way to do this beyond the template in the GCP portal.
Have you reported the various issues with the template to TAC?
Also, have you tried R81.10, which is the current widely recommended version?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yeah, I can file a ticket but up to this point TAC has told us they can't support cloud deployments, even though we have Diamond support. As you can probably guess, we were not happy this this response and have decided to look at other vendors.
I did a PoC for R81 last year and it was basically unusable. We're currently standardized on R80.40 and the migration to R81 will likely not be until next year. As you probably know, upgrading existing clusters is non-trivial as it requires them to be deleted and re-created, which means 1-2 hours downtime.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
you can found Terraform templates here:
https://github.com/CheckPointSW/CloudGuardIaaS/tree/master/terraform/gcp
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Oh wow thanks! Works great except it's not clear what to set 'image_name' to. This is what worked for me for R80.40 HA BYOL:
image_name = "check-point-r8040-gw-byol-cluster-294-904-v20210715"
![](/skins/images/A53DAF99EDBAFE11A1FC6E62F510C235/responsive_peak/images/icon_anonymous_message.png)