Skip to content

Upgrading Wallarm NGINX Node with All-in-One Installer

These instructions describe the steps to upgrade the Wallarm node installed using all‑in‑one installer to the latest version 6.x.

Re-installation of the Wallarm services is required

For a safe upgrade procedure, install the new Node on a new machine, redirect traffic to the new machine, and then remove the old one.

Alternatively, you can stop and remove the services on your current machine and then re-install the node. However, this may cause some downtime, which is not recommended.

This article describes the safest migration method.

Step 1: Install the new node version on a clean machine

  1. If upgrading from 5.x or earlier and the postanalytics module is installed separately, copy and update your existing configurations to reflect the replacement of Tarantool with wstore:

    • On the filtering node machine, in the http block of /etc/nginx/nginx.conf, rename wallarm_tarantool_upstream to wallarm_wstore_upstream.
    • On the postanalytics machine (if using a custom host and port), in /opt/wallarm/etc/wallarm/node.yaml, rename the tarantool section to wstore.

  2. Install the newest version of the node on a new machine alongside the most recent version of NGINX by following one of the guides. The guide also covers the requirements for the machine.

  3. Route the traffic to the new machine for the new node to process it.

Step 2: Remove the old node

  1. Once traffic is routed to the new machine and your Cloud-stored data (rules, IP lists) is synchronized, perform some test attacks to ensure your rules work as expected.

  2. Delete old node in Wallarm Console → Nodes by selecting your node and clicking Delete.

  3. Confirm the action.

    When the node is deleted from Cloud, it will stop filtration of requests to your applications. Deleting the filtering node cannot be undone. The node will be deleted from the list of nodes permanently.

  4. Delete machine with the old node or just clean it from Wallarm node components:

    sudo systemctl stop wallarm
sudo rm -rf /opt/wallarm