Help Center/ Host Security Service/ User Guide (ME-Abu Dhabi Region)/ FAQs/ Agent FAQs/ What Do I Do If the HSS Upgrade Fails?
Updated on 2024-07-12 GMT+08:00
View PDF
Share

What Do I Do If the HSS Upgrade Fails?

About the Upgrade

  • Servers are displayed on both the old and new console of HSS, regardless of whether their agents have been upgraded. The server statuses are properly displayed on the console that you are using.
  • Agent upgrade is free of charge.
  • The upgrade does not affect the workloads on your cloud servers.
  • After the upgrade, the billing stops on the old console and starts on the new console.
  • After the upgrade, your servers will be protected by HSS (New).

Possible Causes

After the automatic upgrade is complete, it takes 5 to 10 minutes for the agent status to be refreshed.

Possible causes for abnormal agent statuses are as follows:

  1. Access to port 10180 is restricted. The agent upgrade requires accessed to port 10180.
  2. The available memory of the VM is insufficient. The agent upgrade occupies certain memory. If the available memory is less than 300 MB, the upgrade will be affected.

Locating and Fixing the Problem

  • Restricted Access to Port 10180
    Ensure the server where the agent is to be installed or upgraded can communicate with the network segment. The security group of your server must allow outbound access to port 10180 on the 100.125.X.X/16 network segment.
    • Troubleshooting Procedure
      1. In the upper left corner of the page, select a region, click , and choose Compute > Elastic Cloud Server.
      2. Click the name of the server. On the server details page that is displayed, click the Security Groups tab.
      3. Click the Outbound Rules tab and check whether port 10180 is specified in the deny policy.
        1. If it is not specified, the problem was not caused by port access restriction.
        2. If it is specified, the problem was caused by port access restriction.
    • Solution

      Allow access to the port.

  • Insufficient VM Memory
    • Troubleshooting Procedure
      1. Use a remote management tool, such as SecureFX or WinSCP, to log in to the server.
      2. Run the following command to check the memory usage of the server:

        free -m

      3. Check the value of free in the command output, as shown in Figure 1.
        If the value of available is smaller than 300, the memory is insufficient.
        Figure 1 Querying the memory
    • Solution
      • Close the applications with high memory usage.
Parent topic: Agent FAQs