Changes for page R26 - Single lane
Last modified by Carlijn Kokkeler on 2023/10/11 16:05
From version 4.1
edited by Erik Bakker
on 2023/01/23 14:40
on 2023/01/23 14:40
Change comment:
There is no comment for this version
To version 9.1
edited by Carlijn Kokkeler
on 2023/10/11 16:05
on 2023/10/11 16:05
Change comment:
There is no comment for this version
Summary
-
Page properties (3 modified, 0 added, 0 removed)
Details
- Page properties
-
- Title
-
... ... @@ -1,1 +1,1 @@ 1 -R2 3- Single lane1 +R26 - Single lane - Author
-
... ... @@ -1,1 +1,1 @@ 1 -XWiki. ebakker1 +XWiki.CarlijnKokkeler - Content
-
... ... @@ -1,16 +1,21 @@ 1 -Service affecting template ;in orderto updateto this cloud template thereisonlyasinglestep required.1 +Service affecting R26 template that improve NFS performance. 2 2 3 +**Process** 4 +We upgrade in one step to use the new R26 release of the cloud template. This step is service affecting. 5 + 3 3 **Overview** 4 -This updatechanges the Carwash - for context on the carwash see [[this link>>doc:Main.eMagizAcademy.Fundamentals.fundamental-emagiz-cloud-inner-workings||target="blank"]]. Note that using thisnew version of the Carwash involves a DNS change, and thus relies on clients honoring TTLs of DNS records. This updatealso changes the IP adresses used in the infrastructure. Forore details, please contact ExpertServices. Furthermore, TLSv1.0 is disabled inhisupdate. Verify legacy softwarecan handle atleast TLSv1.1 before updating.7 +This version contains performance improvements for NFS. 5 5 6 6 **Updates** 7 - * Changed ciphers and cipher suites 8 - * Disabled TLS V1.0 support and enable TLS V1.3 support 9 - * IP addresses available for the new car wash 10 - ** eu-central-1a: 35.158.46.28 11 - ** eu-central-1b: 3.74.190.88 10 +* Ubuntu version update including latest security patches. 11 +* This upgrade is service-affecting, as all instances have to be recreated. 12 12 13 +**Update Steps** 14 +* Use the final template (service affecting) (duration: 10 minutes) 15 +** This step will upgrade the primary machines in the first Availability Zone in your Cloudslot. 16 +** The runtimes on the machines will be restored using the active release in the eMagiz portal. 17 +* User actions after applying the final template: 18 +** Check if all runtimes are reachable by Deploy Architecture. 19 +** Check if all flows have been installed according to the active release. 20 +** Check if messages pass through the model by verifying a critical message flow in external systems. 13 13 14 -**Technical notes** 15 -• Supported Ciphers in OpenSSL Format: ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:DHE-RSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS@SECLEVEL=1 16 -• Supported TLS Versions: TLSv1.1, TLSv1.2 and TLSv1.3