Up2Date: Configuration Roll Back Option
Add a link in the Up2Date section with the most recent applied Up2Dates, and all for a roolback to a previous version if needed.
Astaro needs to implement an option to either rollback to a certain date (snapshot) or rollback pattern and firmware updates.
for worldwide support of a network
-> a internal image for e.g. on the harddisk
-> choose this image and boot = active image
-> second image is for a fast switch between running configuration and backup
-> a similar idea like the backup rom on mainboards
-> it could / would be something like a appliance with two virtual images and one is offline and if you need it - shutdown the actual and start the other one
-> it could be also something like a automatic newinstallation -> scripted ( automatic download of the newest image and start of installation) and you only enter the settings like ip that it has after the new installation
I think this saves a lot time for this new installation and makes it easier for remote troubleshooting.
I had often the problem that something whereever goes wrong and I need a new installation.
So I need someone onside ...
With this backup image it would be fantastic to solve everything remote.
Completed as part of XG Firewall, where you do have full roll-back to a previous version.
Isn't this the UTM feature request forum? Why is this marked completed when implemented on a different line of products?
Sebastian Mecke commented
This option would have saved me many hours of recovery work. Please add!
I would also have usage for that, AND in addition:
switch to updated device of a cluster and switch back;
so you have chance to test and switch back if nessessary...
This, again, would have come in handy for many customers that Up2Dated to 9.108 recently.
Juergen Marmann commented
t's time to revive this discussion. I almost applied the 9.104 soft release to our in-house UTM. I was saved from having to re-install by actie User BB member gilipeled. It seems like this shouldn't be so hard. Backup the rpms that are being replaced. Backup any databases that are to be modified for the newer version, and you're done. I realize that a roll-back to 9.103 might have lost some reporting or quarantined emails, but that's easier to deal with than having to reload from ISO and losing ALL reporting and everything.
Cheers - Bob
CoyotePoint has a nice implementation of this.
However, istm that the configs would be different in each version (still good for a upgrade failure though)
Have reinstalled many after bad patches, not hoping to ever do it again.
Could be as easy as snapshot way. Image running machine to extra partition or only the delta everytime after an initial image.
Patch running, restart, allow failback to previous snapshot or multiple with one initial and multiple deltas to go back to.
I need that, too. I already had that VPN-Client problem ... Second boot rom would have been the best solution! And what happens if my firewall in USA would have a problem??? I would appritiate that.
Massimo Dalla Giustina commented
....however I totally agree!
Massimo Dalla Giustina commented
I think this is a duplication request of http://feature.astaro.com/forums/17359-astaro-security-gateway-feature-requests/suggestions/193830-up2date-configuration-roll-back-option?ref=title
Eric Fan commented
I strongly recommend Astaro Linux Core stored in ROM/Flash rather than Hard-disk, because I lose some pre-sales were about that in China and Hong Kong. In China, because of unstable electrical system always suddenly down, this will impact astaro hard-disk defective easily.
... but today we hat a lot of fun with the IPS :D ... I love it!!!
for the worst case the KVM would be nice
Well I think pattern updates need to be included!! I just had my Astaro ASG die on me a few hours ago, and it happened RIGHT after a new pattern update was installed! Good thing I had my other router on standby for this exact case.
Also, funny thing is, when I went to the Astaro forums to report it, they're no longer up.... Wonder if they got hit by their own update bug?? NG
In combination with an KVM ...
would be great.
Hi Bob, yes it is I have to support Europe, Asia and the USA... and I do not want to work 24h when I have to do some troubleshooting.... so I am looking always to get a chance to be able to solve everything remote :-) In this case I have to call some to help me onside...
Very cool! Like most genius ideas, this one seems obvious now that you mention it!
Roland Stauber commented
Yes! Best feature ever!!!
Florian Stock commented
Yes, this would make things a lot easier in case of such problems!
I would appreciate an implementation of this request!!