Forum Discussion

Matt_389927's avatar
Matt_389927
Icon for Nimbostratus rankNimbostratus
May 06, 2019

What is the best way to upgrade an HA pair from 12.x to 14.x in a production environment?

We have two BIG-IP virtual devices in an HA pair that were handed over to my department to manage after they were set up by our engineering department. They're currently on version 12.x and we'd like them to be up to version 14.x and deploy new devices later also on one of the latest versions to reduce any known vulnerabilities in older versions.

 

Since they are currently in production and processing a lot of traffic, we need to minimize downtime.

 

I've seen recommendations saying to do upgrades to major point releases and I've seen that it can go from 12.x to 14.x in the 14.x release notes.

 

While it would be best to have less downtime, I'm more concerned about doing things the right way, the downtime can be forgiven.

 

I'm learning all about this the best I can and have had a few days of training sponsored by F5 but I am still unsure about how to go about doing this.

 

Thank you in advance for any help and guidance.

 

2 Replies

  • Hello Matt!

     

    Welcome to the foruns! Glad you're here.

     

    I would not upgrade to v14 yet. This release did not reach the stability version (14.1.1) so you could hit some bugs. Version 13 have already reached it (v13.1.1.4 or older).

     

    One way to see if the upgrade and how to do that is generating a qkview from the standby box and upload it to ihealth. Inside ihealth you have a menu called "Upgrade Advisor" that can pretty much help you with that.

     

    Some rules of thumb are:

     

    1. Before ever trying to upgrade, backup your entire environment and do failover tests to make sure your apps are correctly configured. Adjust what needs to be adjusted.
    2. We usually start the upgrade on the standby box. When it's up and running we fail all the traffic-groups to it and test everything. Once we are satisfied, we then go and upgrade the othe box.
    3. After both boxes are upgraded, test both of them as active to make sure everything is smooth.

    Pro tip 1: Make sure your devices have active support contracts before you start. In case you need F5 help during the procedure. You can check that here: https://secure.f5.com/validate/validate.jsp.

     

    Pro tip 2: On some old boxes you have to check the "last check date". Please read this carefully before trying to upgrade: https://support.f5.com/csp/article/K7727

     

    Best of luck!

     

    Cheers! Rafael