Re: Simultaneous CARP failover for multiple interfaces

Article View: bit.listserv.openbsd-pf

Article #226

Back to bit.listserv.openbsd-pf Previous Next

#226

From: Kyle Lanclos
Date: Tue, 24 Apr 2012 06:34

17 lines
1734 bytes

Karl O. Pinc wrote:
> I didn't notice _any_ reference to pfsync in the original
> post.  Perhaps this is part of the problem?

I originally wrote:
> I have a pair of OpenBSD firewall/routers in a reasonably vanilla
> pf + pfsync + CARP configuration...

It sounds like using 'defer' may allow pf + pfsync to handle the issues
resulting from asymmetric routing of packets, as long as the asymmetry
is fully contained within the pfsync'd hosts.

I apologize if I gave too much airtime to the pf + pfsync aspects of
what I was trying to resolve, we largely worked around those by enabling
carp preemption.

--Kyle

Technical Details

Message-ID: <20120423213431.GI14608@monkey.ucolick.org>

Path:

arc1-ca.pugleaf.net!h15ni159260bkw.0!nntp.google.com!news1.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!npeer03.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn

References: <20120423184913.GA14608@monkey.ucolick.org> <20120423201944.GX30939@symphytum.spacehopper.org> <1335216056.14499.0@mofo>

Show Full Headers

Complete Article Headers

X-Google-Thread: ff4ef,caf87ae3eae58875
X-Google-NewGroupId: yes
X-Google-Attributes: gidbffa70e3,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
Received: by 10.204.143.143 with SMTP id v15mr1985877bku.8.1335249252960;
        Mon, 23 Apr 2012 23:34:12 -0700 (PDT)
Path: arc1-ca.pugleaf.net!h15ni159260bkw.0!nntp.google.com!news1.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!npeer03.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn
From: lanclos@ucolick.org (Kyle Lanclos)
Newsgroups: bit.listserv.openbsd-pf
Subject: Re: Simultaneous CARP failover for multiple interfaces
Date: 23 Apr 2012 23:34:12 -0700
Organization: None
Lines: 17
Message-ID: <20120423213431.GI14608@monkey.ucolick.org>
References: <20120423184913.GA14608@monkey.ucolick.org>
 <20120423201944.GX30939@symphytum.spacehopper.org>
 <1335216056.14499.0@mofo>
NNTP-Posting-Host: localhost.newsguy.com
Mime-Version: 1.0
NNTP-Posting-Date: 24 Apr 2012 06:34:12 GMT
X-Received-Bytes: 1295
Content-Type: text/plain; charset=us-ascii

Reply to Parent Message