when update instance, host should - start new instance, but dun allow connection - redirect connection to new instance - kill old instance