Skip to main content

Illumio Core 25.2.10 Install, Configure, Upgrade

Supercluster Data Management

Note

This process is used only for non-production testing.

This topic explains how to import data from one Supercluster to another Supercluster. For example, you might want to synchronize a test Supercluster with production Supercluster data.

The procedure uses two scripts, remap_supercluster_backup.rb and update_supercluster_login.rb, which are found in $INSTALL_ROOT/Illumio/scripts.

Back Up Source Supercluster

Back up each PCE in the source Supercluster. See Back Up Supercluster for information.

Restore Backup to Target Supercluster

To import the database, you use a procedure similar to restoring a backup with a few extra steps.

Prepare Target Supercluster
  1. Install the PCE software on each node in the target Supercluster. The software version used on the target Supercluster should be the same as that installed on the source Supercluster.

  2. Copy the backup files to the data0 node of each corresponding PCE in the target Supercluster. When the target Supercluster has fewer PCEs, decide which backups you want to restore.

  3. Collect the public IP addresses for each target PCE. You can find them in the cluster_public_ips section of each PCE’s Runtime Environment File.

  4. When you have configured the following settings, verify that they are identical on the source and target Superclusters:

    • front_end_https_port

    • front_end_event_service_port

    • front_end_management_https_port

Remap Supercluster Backup Files

Perform the following steps on each PCE in the target Supercluster.

  1. On the data0 node of the PCE in the target Supercluster, run the script remap_supercluster_backup.rb with the name of the backup file to be remapped and the name of the file in which to write the remapped backup data. Optionally include the flag --pce-fqdns-to-skip with a comma-separated list of FQDNs you do not want to include in the remapped database.

    sudo -u ilo-pce remap_supercluster_backup.rb --pce-fqdns-to-skip FQDN1,FQDN2... source_backup_fileremapped_backup_file

    For each source PCE FQDN in the backup, the script prompts for the following values:

    • The corresponding target FQDN

    • The corresponding target cluster_public_ips from that PCE's runtime environment file

  2. When prompted, enter the Fully Qualified Domain Name (FQDN) of the target PCE where this backup will be restored.

  3. After the remapped target backup file is written, copy the file to the data1 node.

  4. Repeat these steps on each PCE in the target Supercluster.

Restore Remapped Backup Files

Follow the steps for restoring an entire Supercluster in Restore a PCE or Entire Supercluster, but do not bring the PCEs to runlevel 5. Leave the PCEs at runlevel 2.

Update the Login Service on the Leader
  1. On the leader PCE, update login service properties by running the script update_supercluster_login.rb and specifying the full path to the remapped backup file generated by remap_supercluster_backup.rb:

    sudo -u ilo-pce {{update_supercluster_login.rb {remapped_backup_file}}}
  2. Bring the PCEs to runlevel 5:

    sudo -u ilo-pce illumio-pce-ctl set-runlevel 5
  3. After runlevel 5, do

    sudo -u ilo-pce illumio-pce-ctl listen-only-mode disable