Skip to main content

Illumio Core 22.2 Install, Configure, Upgrade

Import Database to Another Supercluster

This topic explains how to import data from one Supercluster to another Supercluster. For example, you might want to synchronize a test Supercluster with production Supercluster data.

The procedure makes use of two scripts, remap_supercluster_backup.rb and update_supercluster_login.rb, which are found in $INSTALL_ROOT/illumio/scripts.

Back Up Source Supercluster

Back up each PCE in the source Supercluster. See Back Up Supercluster for information.

Restore Backup to Target Supercluster

To import the database, you use a procedure that is similar to restoring a backup with a few extra steps.

Prepare Target Supercluster
  1. On each node in the target Supercluster, install the PCE software. Use the same software version on the target Supercluster that was installed on the source Supercluster.

  2. Copy the backup files to the data0 node of each corresponding PCE in the target Supercluster. When the target Supercluster has fewer PCEs, decide which backups you want to restore.

  3. Collect the public IP addresses for each target PCE. You can find them in the cluster_public_ips section of each PCE’s Runtime Environment File.

  4. When you have configured the following settings, verify that they are identical on the source and target Superclusters:

    • front_end_https_port

    • front_end_event_service_port

    • front_end_management_https_port

Remap Supercluster Backup Files

Perform the following steps on each PCE in the target Supercluster.

  1. On the data0 node of the PCE in the target Supercluster, run the script remap_supercluster_backup.rb with the name of the backup file to be remapped and the name of the file in which to write the remapped backup data. You can optionally include the flag --pce-fqdns-to-skip with a comma-separated list of fictitious FQDNs that you do not want to include in the remapped database.

    sudo -u ilo-pce remap_supercluster_backup.rb 
    --pce-fqdns-to-skip FQDN1,FQDN2... source_backup_fileremapped_backup_file

    For each source PCE FQDN in the backup, the script prompts for the following values:

    • The corresponding target FQDN

    • The corresponding target cluster_public_ips from that PCE's runtime environment file

      When you have more source PCE FQDNs than target FQDNs, use fictitious names and IP addresses for the extras.

  2. When prompted, enter the FQDN of the target PCE where this backup will be restored.

  3. After the remapped target backup file is written, copy the file to the data1 node.

  4. Repeat these steps on each PCE in the target Supercluster.

Restore Remapped Backup Files

Follow the steps for restoring an entire Supercluster in Restore a PCE or Entire Supercluster, but do not bring the PCEs to runlevel 5. Leave the PCEs at runlevel 2.

Update Login Service on Leader
  1. On the leader PCE, update login service properties by running the script update_supercluster_login.rb and specify the full path to the remapped backup file generated by remap_supercluster_backup.rb:

    sudo -u ilo-pce update_supercluster_login.rb remapped_backup_file
  2. Bring the PCEs to runlevel 5:

    sudo -u ilo-pce illumio-pce-ctl set-runlevel 5