In Service System Upgrade - ISSU
Use ISSU to upgrade and troubleshoot an active switch with minimal disruption to the network.
ISSU includes the following modes:
- Restart
- Upgrade
- Maintenance mode
- Maintenance ports
In earlier Cumulus Linux releases, ISSU was Smart System Manager.
Restart Mode
You can configure the switch to restart in one of the following modes.
-
cold restarts the system and resets all the hardware devices on the switch (including the switching ASIC).
-
fast restarts the system more efficiently with minimal impact to traffic by reloading the kernel and software stack without a hard reset of the hardware. During a fast restart, the system decouples from the network to the extent possible using existing protocol extensions before recovering to the operational mode of the system. The restart process maintains the forwarding entries of the switching ASIC and the data plane is not affected. Traffic outage is much lower in this mode as there is a momentary interruption after reboot, while the system reinitializes.
-
warm restarts the system with no interruption to traffic for existing route entries. Warm mode restarts the system without a hardware reset of the switch ASIC. While this process does not affect the data plane, the control plane is absent during restart and is unable to process routing updates. However, if no alternate paths exist, the switch continues forwarding with the existing entries with no interruptions.
When you restart the switch in warm mode, BGP only performs a graceful restart if the BGP graceful restart option is set to
full
. To set BGP graceful restart to full, run thenv set router bgp graceful-restart mode full
command, then apply the configuration withnv config apply
. For more information about BGP graceful restart, refer to Optional BGP Configuration.In an eBGP multihop configuration with warm restart mode, you must set the BGP graceful restart timer to 180 seconds or more.
Cumulus Linux supports:
- Fast mode for all protocols.
- Warm mode for 802.1X, layer 2 forwarding, layer 3 forwarding with BGP, static routing, and VXLAN routing with EVPN. Cumulus Linux does not support warm boot with EVPN MLAG or EVPN multihoming.
NVIDIA recommends you use NVUE commands to configure restart mode and reboot the system. If you prefer to use csmgrctl
commands, you must stop NVUE from managing the /etc/cumulus/csmgrd.conf
file before you set restart mode:
-
Run the following NVUE commands:
cumulus@switch:~$ nv set system config apply ignore /etc/cumulus/csmgrd.conf cumulus@switch:~$ nv config apply
-
Edit the
/etc/cumulus/csmgrd.conf
file and set thecsmgrctl_override
option totrue
:cumulus@switch:~$ sudo nano /etc/cumulus/csmgrd.conf csmgrctl_override=true ...
-
Save the configuration:
cumulus@switch:~$ nv config save
The following command configures the switch to restart in cold mode:
cumulus@switch:~$ nv set system reboot mode cold
cumulus@switch:~$ nv config apply
cumulus@switch:~$ sudo csmgrctl -c
The following command configures the switch to restart in fast mode:
cumulus@switch:~$ nv set system reboot mode fast
cumulus@switch:~$ nv config apply
cumulus@switch:~$ sudo csmgrctl -f
The following command configures the switch to restart in warm mode.
cumulus@switch:~$ nv set system reboot mode warm
cumulus@switch:~$ nv config apply
cumulus@switch:~$ sudo csmgrctl -w
To reboot the switch in the restart mode you configure above with NVUE:
cumulus@switch:~$ nv action reboot system no-confirm
You must specify no-confirm
at the end of the command.
To show system reboot information, such as the reboot date and time, reason, and reset mode (fast, cold, warm), run the NVUE nv show system reboot
command:
cumulus@switch:~$ nv show system reboot
operational applied pending
--------- -------------------------------- ------- -------
reason
gentime 2023-04-26T15:11:23.140569+00:00
reason Unknown
user system/root
mode cold cold
required no
Upgrade Mode
Upgrade mode updates all the components and services on the switch to the latest Cumulus Linux minor release without impacting traffic. After upgrade is complete, you must restart the switch with either a warm, cold, or fast restart.
If the switch is in warm restart mode, restarting the switch after an upgrade does not result in traffic loss (this is a hitless upgrade).
Upgrade mode includes the following options:
- You can upgrade all the system components to the latest release without affecting traffic flow. You must restart the system after the upgrade completes with one of the restart modes.
- You can perform an upgrade dry run, which provides information on the components you want to upgrade so that you can review potential upgrade issues (in some cases, upgrading new packages might also upgrade additional existing packages due to dependencies).
The following command upgrades all the system components to the latest release:
cumulus@switch:~$ nv action upgrade system packages to latest use-vrf default
By default, the NVUE nv action upgrade system packages
command runs in the management VRF. To run the command in a non-management VRF such as default
, you must use the use-vrf <vrf>
option.
cumulus@switch:~$ sudo csmgrctl -u
The following command provides information on the components you want to upgrade:
cumulus@switch:~$ nv action upgrade system packages to latest use-vrf default dry-run
By default, the NVUE nv action upgrade system packages
command runs in the management VRF. To run the command in a non-management VRF such as default
, you must use the use-vrf <vrf>
option.
cumulus@switch:~$ sudo csmgrctl -d
Maintenance Mode
Maintenance mode enables you to take a switch out of production to perform updates or troubleshoot issues. You can put all protocols or all interfaces in maintenance mode.
Cumulus Linux 5.13 and later provides new NVUE nv set maintenance unit
commands and deprecates the nv action enable system maintenance
commands provided in Cumulus Linux 5.12 and earlier:
Protocols
When you put all protocols in maintenance mode:
- All the protocols that support graceful shutdown perform graceful shutdown with all their neighbors.
- The switch goes through a warmboot when rebooted if the switch is in
warm
mode or when you do a warmboot to upgrade software to the next release.
If the protocols perform a graceful shutdown while going into maintenance mode, but some of the neighbors do not have alternate paths, those neighbors continue to send traffic through the switch. That traffic continues to flow through this switch during warmboot and all protocols continue to remain in maintenance mode throughout the warmboot process.
Protocols that support graceful restart continue to do a graceful restart during warmboot to relearn routes from neighbors in the usual way, even though the all-protocols maintenance unit is in maintenance mode.
To put all protocols in maintenance mode, run the nv set maintenance unit all-protocols mode enabled
command:
cumulus@switch:~$ nv set maintenance unit all-protocols mode enabled
cumulus@switch:~$ nv config apply
To take all protocols out of maintenance and put them back into production, run the nv set maintenance unit all-protocols mode disabled
command. All the protocols that support graceful shutdown re-advertise the routes with the original weight or preference.
cumulus@switch:~$ nv set maintenance unit all-protocols mode disabled
cumulus@switch:~$ nv config apply
To put all protocols in maintenance mode, run the sudo csmgrctl -m1
command. All the protocols that support graceful shutdown re-advertise the routes with the original weight or preference.
cumulus@switch:~$ sudo csmgrctl -m1
To take all protocols out of maintenance and put them back into production, run the sudo csmgrctl -m0
command.
Ports
When you put all ports in maintenance mode, all the ports go into the link down state. When you take all ports out of maintenance and put them in production, all the ports move out of the link down state.
To put all the ports in maintenance mode, run the nv set maintenance unit all-interfaces mode enabled
command:
cumulus@cumulus:mgmt$ nv set maintenance unit all-interfaces mode enabled
cumulus@switch:~$ nv config apply
To take all ports out of maintenance and put them in production, run the nv set maintenance unit all-interfaces mode disabled
command:
cumulus@switch:~$ nv set maintenance unit all-interfaces mode disabled
cumulus@switch:~$ nv config apply
To put all the ports in maintenance mode:
cumulus@switch:~$ sudo csmgrctl -p0
To take all ports out of maintenance and put them in production, run the sudo csmgrctl -p1
command.
Check the Maintenance Mode
To check the current maintenance mode on the switch, run the NVUE nv show maintenance
command or the Linux sudo csmgrctl -s
command:
cumulus@switch:~$ nv show maintenance
Maintenance Info
==============
Unit State
----------------------- ---------------
all-protocols maintenance
all-interfaces maintenance
To show the current maintenance mode of the protocols, run the nv show maintenance unit all-protocols
command:
cumulus@switch:~$ nv show maintenance unit all-protocols
operational applied
---------- ----------- -----------
state maintenance maintenance
interfaces
protocols all