The implementation contract holds all the logic, while the proxy holds the storage and address.

Upgrading a protocol means deploying a new implementation contract and pointing the proxy at it.