CDT upgrade method

[khodgson_bts]

What type of upgrade method does the CDT use when upgrading an HA cluster?

Multi-Version Cluster, Minimum Effort or Minimum Downtime?

[the_rock]

https://support.checkpoint.com/results/sk/sk111158

Im fairly sure its MVC, but maybe someone else can confirm.

Andy

[Sergei_Shir]

Quote from

Central Deployment Tool (CDT) Administration Guide -> page "Introduction to CDT" -> section "CDT workflow to upgrade Cluster Members in High Availability mode"

Note - The CDT uses the:

• Multi-Version Cluster (MVC) Upgrade when you upgrade to R80.40 or higher.

• Full Connectivity Upgrade (FCU) when you upgrade to R80.30 or lower.

[Don_Paterson]

One thing to note is the naming of CDT vs CD.

CDT is the CLI tool (long standing tool) sk111158 and CD is the name for the new feature (effectively CDT) embedded into / added to the SmartConsole since R80.40

It's normal for the names to get confused, especially when they are using almost the same name.

When the names are not getting confused then the question can be completely understood and the answers more accurate.

All good though.

Minimum Downtime Upgrade

This section provides instructions for Minimum Downtime (formerly, Zero Downtime) Upgrade:

Best Practice - Use the Central Deployment in SmartConsole . For more information, see the R81.20 Security Management Administration Guide > Chapter Managing Gateways > Section Central Deployment of Hotfixes and Version Upgrades.

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_Installation_and_Upgrade_Gui...

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_Installation_and_Upgrade_Gui...

Upgrade of Security Gateways and Cluster Members with Central Deployment

With Central Deployment in SmartConsole

, you can install software packages to upgrade or to perform a clean install on Security Gateways and Cluster Members.

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_Installation_and_Upgrade_Gui...

[the_rock]

I am old school as they say for these things...I ALWAYS stick with things that work for me, which in this case has always been zero downtime upgrade, must have done 10s of them and never had a single problem.

Andy

[_Val_]

Full Connectivity Upgrade by default, as stated in sk111158

[the_rock]

Yup, correct.

Andy

Central Deployment Tool (CDT) is a utility that runs on Security Management Servers and Multi-Domain Security Management Servers running Gaia OS.  This utility lets you manage a deployment of software packages from your Management Server to the multiple managed Security gateways and cluster members at the same time:

• Installation of software packages
• Perform various actions - take snapshots, run shell scripts, push/pull files, etc.
• Automate the RMA backup and restore process

CDT handles cluster upgrades automatically, including Connectivity Upgrade (CU).

[khodgson_bts · Accepted solution]

According to the CDT admin guide it's MVC for versions R80.40 and up.

Introduction to CDT (checkpoint.com)

[the_rock]

Good point, just saw the same.

Andy

[Don_Paterson · Accepted solution]

MVC

If you keep an eye on GATEWAYS & SERVERS view during the upgrade you will see the state, mode and version changing.
It says Multi-Version Cluster.
You may need to expand the Version column.