If a traffic manager running vTM version 11.1 has upgraded vWAF manually to a version higher than 4.9-41260, the vWAF will refuse to start after upgrading to vTM 17.1.
When rebooting after the upgrade, the error log will show:
SERIOUS appfirewallcontrolerror Error restarting application firewall:
service.sh stingrayafm stop failed: Usage: service PRODUCT start|stop|restart|status
Error: version for stingrayafm is invalid
SERIOUS appfirewallfailed All application firewall decider processes have failed
SERIOUS appfirewalldeciderfail Application firewall decider process running on
127.0.0.1:14000 has failed
SERIOUS appfirewallfailed All application firewall decider processes have failed
If vTM 11.1 was upgraded to vWAF 4.9-41849, the directory /logs/stingrayafm/stingrayafm-17.1 will show:
[email protected]:/logs/stingrayafm/stingrayafm-17.1# ls -la
total 32
drwxr-xr-x 8 root root 4096 Feb 17 12:35 4.9-41260
lrwxrwxrwx 1 root root 9 Feb 17 12:35 current -> 4.9-41849
(4.9-41849 does not exist in /logs/stingrayafm/stingrayafm-17.1 )
-rw-r--r-- 1 root root 10 Jan 19 03:02 default_version.id
drwxr-xr-x 4 root root 4096 Feb 17 12:35 generic
-r-xr-xr-x 1 root root 1969 Jan 19 03:02 migrate.sh
-r-xr-xr-x 1 root root 2669 Jan 19 03:02 service.sh
-rw-r--r-- 1 root root 10 Feb 17 12:35 version.id