Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

HA active-passive preferred primary device

Documentation says for HA active-passive you should select a preferred primary device, because "only the initial primary device holds the licenses and supports services, such as FastPath offloading.".

Does this mean if auxiliary appliance is currently active, it will not utilize fastpath at all?
So degraded performance & limited functionality while aux being master?

Can someone share details what restrictions apply in this case in detail?

I'd like to avoid selecting preferred master to reduce unneccesary ha-failovers, if possible.

From licensing point of view i'd really expect both nodes fully functional while being part of the cluster - no matter who's the license owner.



Added TAGs
[edited by: Raphael Alganes at 3:13 PM (GMT -7) on 15 Oct 2024]
Parents Reply
  • So it‘s just to remind you to ensure your cluster will get the correct licenses during HA-Setup and there‘s no downside not selecting any preferred master?

    That is really misleading in documentation.
    As functions like fast-path offloading are even part of base-license and has nothing to do with licensing in HA, even if you have the wrong initial primary on Setup?

Children