On Dec 08th We've released a new major version of the Liferay PaaS Services Stack. The 5.x version is currently stable and customers are already using it. Customers who have transitioned to the Liferay PaaS 5.X Service Stack have reported decreased backup errors due to automatic retries, great reduction in downtime during restore, and a smooth upgrade process.
What’s in 5.x?
Reduced down-time while performing database restores: A new opt-in restore strategy is now available. Currently, as soon as the restore process begins, we take down Liferay and other services that depend on the database.
In the new Prepare and Swap strategy, we remove this need entirely. Instead, we restore both the database and document library backups into a fresh database instance and volume, respectively - without touching the existing services. If the restore is successful, we then switch to the new database instance and volume.
During tests our team identified a reduction of 95% of the downtime window. Now the downtime will last as long as it takes for Liferay DXP to restart.
Regional Database is now default: To minimize failover latency and improve resilience for database service, we’ve decided to upgrade all of our customers to the regional persistent disk mode and move away from legacy failover replica mode. Regional mode is now default on 5.x. Click here for details.
Improved support for WAF: Our webserver service image now contains the ModSecurity v3 Library installation and the necessary connector to integrate with Nginx. ModSecurity is an application-level security layer (WAF - Web Application Firewall) responsible for protecting applications against XSS and SQL Injection attacks. Click here to learn more about this feature.
Upgrading Your Liferay PaaS Services Stack
The Liferay PaaS workspace has configuration for each one of the components of a typical Liferay DXP environment. To take advantage of the new features and fixes provided by the 5.x stack of services, you must update your entire stack to the new 5.x images. See our documentation.
Support for previous versions
While we will maintain the previous Liferay PaaS Services Stack for a while, it's important to upgrade as soon as possible in order to benefit from all the bug fixes and improvements. Once we define a timeframe to discontinue previous versions of the Liferay PaaS Services Stack we will announce a date to do so.
Detailed list of improvements
-
Customization of upload retry parameters to Google Storage.
-
Ability to export and import database data through CloudSQL Admin API.
-
Option to prepare restore while keeping Liferay service up.
-
Validation of backup restore strategy.
-
Fix for chown error during backup service restart.
-
Uploaded backup now displays in DR environment.
-
Improved logging for "swap" backup restore strategy.
-
Upgrading from old backup service no longer results in error trying to list files.
-
Ability to create multiple backup requests at the same schedule.
-
Faster and more straightforward directory deletion logic.
-
Fix for vulnerability in Backup service third-party packages.
-
ZIP utility now provided in service image.
-
Python is now installed.
-
First deployment no longer fails when project does not contain a 'dev' environment.
-
Jenkins credentials no longer reset on restart.
-
CI startup process is faster due to improved logic for mounted volume.
-
Bumped version of BlueOcean plugin.
-
Build-essential now installed.
-
Database service now uses project environment SA.
-
Warning message now displayed when database service is not started.
-
Warning displayed when database instance disk size is bigger than requested size.
-
Fix for error when setting database flag.
-
Fix for database server not updating value of an existing MySQL flag.
-
Authentication errors on database service are fixed.
-
Vulnerabilities in Docker images for database and debian:9 packages are fixed.
-
Alpine version updated from 15 to 16.
-
Node now updated to alpine on database-service.
-
Improved architecture for better isolation of service account-based resources.
-
Ability to switch doclib format for a given project.
-
Log formats for TOPS-96 now available.
-
LIFERAY_HTTP_PERIOD_HEADER_PERIOD_VERSION_PERIOD_VERBOSITY is now modifiable.
-
Improved backwards compatibility and use of DXP_VERSION in build-image.sh.
-
Default Metaspace for DXPC Liferay increased.
-
Added JVM arg required for JDK11.
-
Fixed mysqldump failure in Liferay-service.
-
Fixed query string for mariadb change.
-
Updated bash to alpine on Liferay-dxp.
-
Added Elasticsearch 7.17.1 image.
-
Mod_sec is now pulled and compiled into Nginx image.
-
Use of $http_host in default log config instead of building the prefix with environment variables.
-
Backend no longer displays as DOWN when HAProxy health check exceeds default value.
-
Added 'application/javascript' mime/type to the list of valid gzip files.
-
Fixed Docker image vulnerability in debian:10 package.