Moving The etcd Database on T-1100 XL Appliances

  • The TufinOS 3 operating system reached EOL (end of life) on June 30, 2024 and is no longer supported. The final version - TufinOS 3.110 - was released in December 2023. If you are still running on TufinOS 3, we recommend upgrading to TufinOS 4 to get the benefit of the latest security patches.

  • TufinOS 4 does not support TOS releases earlier than R22-2 so if you are still running R22-1 or earlier, you must upgrade TOS before upgrading to TufinOS 4.

All Gen 3.5 and Gen 4 Tufin Appliances come equipped with the etcd database. etcd is used for storing information which needs to be accessed simultaneously by multiple nodes, and needs to be capable of enabling TOS Aurora to meet high performance requirements. Therefore to enhance the performance of TOS Aurora, the etcd database needs to be stored in a separate disk on the data node server.

If you are running a High Availability deployment, this procedure needs to be repeated for each data node.

Gen 4 appliances come pre-configured with the etcd database already in a separate partition. Gen 3.5 T-1100 XL appliances require that you perform a manual procedure to move the etcd database to a separate partition. This requires that you split the RAID controller into two groups:

  • 4 discs which will run TufinOS and TOS Aurora

  • 2 discs which will run the etcd database

This procedure will erase all data on the appliance. Back up your data before beginning the procedure. After splitting the RAID controller, you are going to install 3.110 and TOS Aurora, and then restore the data.
This procedure is only relevant for Gen 3.5 T-1100XL Tufin appliances. T-1100 Tufin appliances have fewer discs, and therefore you cannot split the RAID controller. T-1100 appliances should only be used as worker nodes.

Prerequisites

Network Requirements

  • When logging into the appliances, you will need to log in as user root or another user with root permissions

General Requirements

  1. Check the appliance model by running the following command as user root.

    dmidecode -s chassis-version 2> /dev/null

    This procedure is only relevant for Gen 3.5 T-1100XL. Gen 4 appliances do not require this procedure, and you cannot split the RAID controller on other appliance models.

  2. Check the TufinOS version installed on the appliance by running the following command.

    cat /etc/redhat-release

    If TufinOS 2 is installed, install TufinOS 3, and then return to this procedure.

  3. Backup your data.

Split the RAID Controller

  1. Log in to the appliance command line interface (via the physical console or via RMM), and reboot the appliance

    2. reboot

    • While the appliance is booting, press CTRL+A when the message for the utility is displayed.

      • The following message is displayed while the utility initializes.

    1. After the utility initializes, select Logical Device Configuration and press Enter.

    2. Select Manage Arrays, and press Enter.

    3. In the List of Arrays verify that only 00 TUFIN RAID 10 is displayed. Select the array and press Enter.

      4. If multiple arrays are displayed, do not continue this procedure, and contact Tufin Support.

    4. Verify that there are only three Raid 1 Array Members.

      5. If there is a different number of arrays, do not continue this procedure, and contact Tufin Support.

    5. Press Esc to return to the List of Arrays.

    1. In the List of Arrays page, select the TUFIN array, and press Delete.

      2. The Array Properties page is displayed.

    2. Press Delete.

      3. A warning is displayed.

    3. Press Y.

    4. After the arrays are deleted, press any key to continue.

    1. In the Main Menu, select Initialize Drives and press Enter.

    2. Press Space and select all six drives.

    3. Press Enter.

      4. A warning message is displayed.

    4. Press Y.

    5. After the drives are initialized, press any key to continue.

    1. In the Main Menu, select Create Array and press Enter.

    2. Use the Space key to select the first four drives.

    3. Press Enter.

    4. Configure the Array Properties:

      • Array Type: Select RAID 5

      • Array Label: Enter TUFIN

      • The Array Label is case sensitive. All letters need to be capitalized.

      • Array Size: leave unchanged

      • Stripe Size: Select 256KB

      • Read Caching: Select Disable

      • Write Caching: Select Disable

      • Create RAID via: Select Build/Verify

    5. Select Done.

      6. A message is displayed recommending that you disable cache settings.

    6. Press Y to disable the cache settings.

    7. After the array is created, press Y to continue.

      8. The array is available immediately, but array performance will be impacted during the Build/Verify process.

    1. In the Main Menu, select Manage Arrays and press Enter.

    2. In the List of Arrays select 00 TUFIN RAID 5 and press Enter.

      3. If the array 00 TUFIN RAID 5 is not displayed, or if the name of the array is not TUFIN in all capital letters, delete the array and recreate it using the instructions above.

    3. In the Array Properties, there should be four drive members.

      4. If the number of drive members is different, delete the array and recreate it using the instructions above.

    4. Press Esc twice to return to the main menu.

    1. In the Main Menu, select Create Array and press Enter.

    2. Use the Space key to select the last two drives.

    3. Press Enter.

    4. Configure the Array Properties:

      • Array Type: Select RAID 1

      • Array Label: Enter ETCD

      • The Array Label is case sensitive. All letters need to be capitalized.

      • Array Size: leave unchanged

      • Stripe Size: N/A

      • Read Caching: Select Disable

      • Write Caching: Select Disable

      • Create RAID via: Select Build/Verify

    5. Select Done.

      6. A message is displayed recommending that you disable cache settings.

    6. Press Y to disable the cache settings.

    7. After the array is created, press Y to continue.

      8. The array is available immediately, but array performance will be impacted during the Build/Verify process.

    1. In the Main Menu, select Manage Arrays and press Enter.

    2. In the List of Arrays select 01 ETCD RAID 1 and press Enter.

      3. If the array 01 ETCD RAID 1 is not displayed, or if the name of the array is not ETCD in all capital letters, delete the array and recreate it using the instructions above.

    3. In the Array Properties, there should be two drive members.

      4. If the number of drive members is different, delete the array and recreate it using the instructions above.

    4. Press Esc twice to return to the main menu.

    1. Press Esc twice

    2. Select Yes to exit.

    3. The appliance will be rebooted.

    4. During the reboot process, verify that you see two logical devices at the end of the Adaptec RAID initialization.

Install TufinOS and TOS

  1. Install the latest version of TufinOS and the version of TOS that was previously installed on the appliance. See Clean Install of TOS Aurora/TufinOS 3.110 on a Tufin Appliance via USB

  2. Restore the data to the appliance. See Backup Restore Commands