Yeah, we&#x27;re paying for security updates to 2.3 rather than maintaining our own fork, although we do have an increasing stack of backported features. Our approach to getting off 2.3 is to extract core functionality out into smaller API driven applications, with the eventual goal of being able to turn off the monolithic 2.3 based application.