VM Pfsense and upgrade cluster

[frankz]

Hi everyone, before proceeding on the cluster in production, I upgraded from 7 to 8 on a test environment. Everything is ok .

I only have a doubt about the upgrade in production, that is, in the node where I will have to upgrade, I have my pfsense firewall as a VM, therefore necessary for internet connections. I was asking, if I upgrade by turning off all the VMs, but leaving only the one that is essential for the internet connection, do I gamble or not?

Thank you

 

[floh8]

u have a cluster, so u can move the vms from the one u will upgrade

 

[frankz]

u have a cluster, so u can move the vms from the one u will upgrade

Thanks for answering, but pfsense runs locally and there are usb connected!

 

[Neobin]

You could do it like others already successfully did and download all packages first (--download-only):
https://forum.proxmox.com/threads/download-pve8-packages-and-continue-upgrade-offline.129804

 

[frankz]

You could do it like others already successfully did and download all packages first (--download-only):
https://forum.proxmox.com/threads/download-pve8-packages-and-continue-upgrade-offline.129804

Excellent thought !! Thank you very much!

 

[Ramalama]

Hi everyone, before proceeding on the cluster in production, I upgraded from 7 to 8 on a test environment. Everything is ok .

I only have a doubt about the upgrade in production, that is, in the node where I will have to upgrade, I have my pfsense firewall as a VM, therefore necessary for internet connections. I was asking, if I upgrade by turning off all the VMs, but leaving only the one that is essential for the internet connection, do I gamble or not?

Thank you

For this reason, you can setup opn/pfsense HA

You think it's maybe not helpful short-term, but you will thank me later when no matter what you do or happens, you will always have Internet connection.

And yes, ha works with DSL/pppoe connections, it works with different nic brands, it works even with interfaces that are available on one pf/opnsense while not on the other...
Just the "opt" names needs to be assigned to the correct nics, that provide your vlans.

As pf/opnsense does only sync the "opt" names and it doesn't matter what nics are behind that names...

So do yourself a favor for the future.
Cheers