On 2011-01-19, Alastair Johnson <att...@gmail.com> wrote: > > We also have a very similar question. I have a pair of CARP'd & pfsync'd > firewalls of embarrasing vintage and would like to be able to swap them for > new 4.8 machines (new hardware) one at a time. Is this possible?
pfsync on a firewall of embarassing vintage won't talk to 4.8, so your active connections will take a hit. usual method would be to upgrade the backup, when it's back online failover to it, then upgrade the master.