Pfsense s2s ha

[yctn]

Hello,

currently i connect 2 datacenters bij simply 1 pfsense vm in eatch datacenter one is openvpn client and the other one is openvpn server.

But how can i make this setup high available?

cause at some point i will have to upgrade one of the pfsense boxes to a new version for example.
or the hypervisior where pfsense is running on fails.

how should i build this?

Kind regards.