[VIDEO] Scheduled Upgrades

When Branch or Cloud Connectors are deployed, their software is upgraded to the latest version automatically. Although the appliance exists within a customer’s cloud service provider subscription, Zscaler engineering is responsible for maintaining the appliance software. This can include OS upgrades, hotfixes, and Zscaler software upgrades.

Branch and Cloud Connectors check for new software versions every day between 12 and 2 am. If an update is available, they will upgrade themselves automatically. Upgrades for connectors within a Branch or Cloud Connector Group are then staggered to prevent service impact. If deployed in High Availability, as is best practice, the Gateway Load Balancer or Microsoft Standard Load Balancer will ensure the data path outage is minimized. After a connector is successfully upgraded, another eligible connector in the Branch or Cloud Connector group is upgraded.

In this video, we’ll explore:
[0:00 to 1:20] Overview of Scheduled Upgrades
[1:20 to 2:01] Modifying upgrade windows
[2:01 to 2:37] Key Takeaways

Transcript

Hello, my name is Aaron and I’m one of the Principal Technical Product Specialists for Zscaler Cloud Workload Protection.

In this video, we’ll explore how Zscaler Cloud Connector can automatically be upgraded using the Scheduled Upgrade functionality of the Cloud Connector portal.

When Branch or Cloud Connectors are deployed, their software is upgraded to the latest version automatically. Although the appliance exists within a customer’s cloud service provider subscription, Zscaler engineering is responsible for maintaining the appliance software. This can include OS upgrades, hotfixes, and Zscaler software upgrades.

Branch and Cloud Connectors check for new software versions every day… and if one is available, they will upgrade themselves automatically. By default, the upgrade window starts at midnight (from the perspective of the deployed appliance) and all connectors in the Branch and Cloud Connector Group are updated within a 2-hour window. When deployed, the appliance references metadata from the Cloud Service Provider to identify where it is deployed, geographically speaking, in an effort to ascertain its local timezone. Then, it uses NTP to synchronize its clock. Upgrades for connectors within a Branch or Cloud Connector Group are then staggered to prevent service impact. If deployed in High Availability, as is best practice, the Gateway Load Balancer or Microsoft Standard Load Balancer will ensure the data path outage is minimized. After a connector is successfully upgraded, another eligible connector in the Branch or Cloud Connector group is upgraded.

For those customers wishing to modify a scheduled upgrade window, navigate to the Cloud Connector portal > Administration > Connector Groups…

Notice that each Cloud or Branch Connector exists within a group. You may also notice that this group corresponds to an individual VPC and Availability Zone. As mentioned previously, if two or more appliances exist in the same group, their upgrade will be staggered to prevent service impact. You can quickly identify, using the Upgrade Window and Upgrade Status columns, which appliances are scheduled to be upgraded as well as which ones were successfully upgraded.

Click the Edit icon on the right of the group or appliance you wish to modify…

At the top of the pop-up window, adjust the time window to that of your preference and click the Save button.

That’s it! Your Cloud Connector appliances will now honor the new time range when attempting to upgrade.

– Cloud Connector software is maintained by Zscaler engineering automatically

– Cloud Connector appliances will automatically check for upgrades every day and use cloud metadata along with NTP to establish their geographical timezone and correct time

– By default, upgrades are staggered within Availability Zones (or, Cloud Connector Groups) and happen from midnight to 2 am local, appliance time

– You can customize this time range using the Edit function within the Cloud Connector Groups page under the Administration menu

1 Like