Rules migration in a HA setup

[dbd]

Hi.
Regarding the rules migration, are there any particular steps to follow for an HA system ? Should we just do the migration on the current master, and let configuration sync replicate this on the backup ?

[Monviech (Cedrik)]

Essentially yes, but you can also wait for a while longer since the old rules are not deprecated. Both rule systems will be side by side for a while.

[dbd]

Thanks. I might wait a bit then before migrating my old rules

[EHRETic]

Hi there,

What I noticed so far, is that when I deleted old rules on my master system and synced both, the old rules were not deleted on the backup system.

Is that expected? Just wanted to know 😊

[Evert]

I'm seeing the same here. I have migrated the rules successfully on the primary unit, and deleted the old ones.

But even after forcing an extra HA sync, the secondary unit still shows the firewall rules under both 'Rules' and 'Rules [new]'.

Does this indicate something went wrong, or do I simply ignoe this and delete the old rules on the secondary unit manually?


Version: OPNsense 26.4.1p1_3-amd64

[EHRETic]

Does this indicate something went wrong, or do I simply ignoe this and delete the old rules on the secondary unit manually?

On mine, I deleted the rules on both instances "manually". Run fine since!😉