In case of an upgrade, a new launch configuration has to be created with the new Sensor AMI. The new launch configuration has to be associated with the auto scaling group. You can create a copy of the existing launch configuration, add the new Sensor AMI to the launch configuration and associate it to the auto scaling group.
The following section describes steps to upgrade Sensors in an auto scaling group so that there is no disruption to traffic inspection. The Sensors with the latest software version are deployed first. The Sensors with the older software version are deleted only after the new Sensors are deployed.
To upgrade the Virtual IPS Sensors launched in an auto scaling group, perform the following steps in AWS console:
Copy the launch configuration
- In the Launch Configurations page, select the launch configuration you want to create a copy of.
- In the
Details tab, click
Copy launch configuration.
The Review tab for the launch configuration opens.
- Click Edit AMI and select the new AMI for the Sensor.
- After selecting the new AMI, go to the Review tab and click Create launch configuration.
Associate a new launch configuration
- In the Auto Scaling Groups page, select the auto scaling group for which you want to update the launch configuration.
- In the Details tab, click Edit.
- Select the new launch configuration from the Launch Configuration drop-down.
- In the
Desired field, enter twice the number that was available in the previous launch configuration.
The maximum number has to be greater than or equal to the desired number.
- In the Termination Policies, select OldestInstance first followed by the Default policy.
- Click
Save. The new launch configuration is linked to the auto scaling group.
Virtual IPS Sensors with the new Sensor software version is launched in the auto scaling group.
For more information on auto scaling groups, see the section Auto scaling of Sensors to improve traffic throughput in Trellix Virtual Intrusion Prevention System Product Guide.