This article describes FortiProxy config-sync cluster upgrade behavior.
Scope
FortiProxy 7.0 and later.
Solution
By default, the sequential-upgrade is enabled.
The command is:
config system ha
set sequential-upgrade enable
end
The secondary unit will be upgraded first, the same as the a-p mode behavior.
If the config-sync cluster has more than 2 HA members, the new firmware image will be sent by the primary unit to one secondary unit only. Then wait until the secondary unit reboots and joins back to HA cluster. Next, the primary unit will send the image to the next secondary unit.
If sequential-upgrade is disabled, all secondary units will be upgraded at the same time.
