Updates and Upgrades

Automatic updates #

Firewall setup #

To have a working update process check that the system can connect to

• Port 443 UDP/TCP to
  • CDN: update.iacbox.net
  • Primary: update.iacbox.com
  • Fallback server: update2.iacbox.com, update3.iacbox.com

Major upgrades #

New Major Versions include big changes such as major version upgrade of the linux kernel and linux core components.
Major Versions are rolled out over a longer period of time compared to simple patchlevel updates.

Upgrades from one major version to another major version are provided some months after a major version has been released.

Patchlevel updates #

So called Patchlevel updates are smaller updates within one major version which are released regularly every 2-8 weeks.

Such updates consist of

• Security updates
• Bugfixes
• Enhanced present features
• New features

WebAdmin Menu #

Manual Update #

Manually updating / upgrading can be done in the WebAdmin System / Online update menu.

History #

All update logs can be downloaded in the History section of the Online Update menu.

Settings #

In this tab the following settings can be made:

• Automatic updates: to stay on a specific software version, it is possible to disable automatic upgrades / updates.
• Update day + time: define days and the time-span in which the automatic online update is allowed to run. The system picks one of the allowed days randomly to start the update within the defined time-span. Depending on the size of the update and the available bandwidth speed (uplink), it may take some time to finish.

DNS Filter updates #

The DNS Web filter works based on filter lists which need to be updated regularly, also if there are no patchlevel updates. This is done automatically about once a week.

• The compressed size of the lists is close to ~100MB for the full update.
• But there are smaller incremental updates for systems with switched on automatic updates (this is the default).

Software maintenance #

The system will be eligible for upgrades / updates released until the expiration date of the Software Maintenance. Any upgrades / updates released afterwards will not be available with the exception of selected bugfix updates.

Security #

All update requests are secured by TLS connections and all API responses and downloaded files are cryptographically signed which ensures that only unchanged original updates are installed.