carpdev

Hi list!

Does anybody know about carpdev implementation status on
FreeBSD?

Is it safe to use Max's patch from 10 January 2008 in
production?

Thanks,
Alexander Vyrlanovich
_______________________________________________
freebsd-pffreebsd.org mailing list

http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to
"freebsd-pf-unsubscribefreebsd.org"

On Thu, 2008-04-10 at 16:10 +0300, Alexander Vyrlanovich
wrote:
> Hi list!
> 
> Does anybody know about carpdev implementation status
on FreeBSD?
> 
> Is it safe to use Max's patch from 10 January 2008 in
production?
> 

I do not know of the specific patch at this moment, but I
use carp
devices on every one of my FreeBSD firewalls. I have used
CARP as the
basis for clusters of web / db / mail / NFS etc. servers
combined with
devd and some other unique concepts. I have had no problems
with CARP at
all for over 2 years now on both the 6-STABLE and 7-CURRENT
/ 7-STABLE
branches. 

Tested firewall fail over with my configs using CARP when we
started
pulling Ethernet plugs resulted in, at most, negligible
packet loss
while pinging. From the application layer perspective, no
sessions
experienced any interruption while fail over testing all
systems I run
CARP on. 

Cheers,
Elliott Perrin
elliottc7.ca


_______________________________________________
freebsd-pffreebsd.org mailing list

http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to
"freebsd-pf-unsubscribefreebsd.org"

I mean ifconfig carp0 carpdev iface
to attach carp pseudo-device to iface.

The goals is to have physical iface and attached carp
device
configured in different IP subnets like OpenBSD can do.
(for example if ISP assign /30 subnet to me, where only two
IPs
can be located)


On 10 ÁÐÒ. 2008, at 18:32, Elliott Perrin wrote:
> On Thu, 2008-04-10 at 16:10 +0300, Alexander
Vyrlanovich wrote:
>> Hi list!
>>
>> Does anybody know about carpdev implementation
status on FreeBSD?
>>
>> Is it safe to use Max's patch from 10 January 2008
in production?
>>
>
> I do not know of the specific patch at this moment, but
I use carp
> devices on every one of my FreeBSD firewalls. I have
used CARP as the
> basis for clusters of web / db / mail / NFS etc.
servers combined with
> devd and some other unique concepts. I have had no
problems with  
> CARP at
> all for over 2 years now on both the 6-STABLE and
7-CURRENT / 7-STABLE
> branches.
>
> Tested firewall fail over with my configs using CARP
when we started
> pulling Ethernet plugs resulted in, at most, negligible
packet loss
> while pinging. From the application layer perspective,
no sessions
> experienced any interruption while fail over testing
all systems I run
> CARP on.
>
> Cheers,
> Elliott Perrin
> elliottc7.ca
>
>
> _______________________________________________
> freebsd-pffreebsd.org mailing list
> 
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to
"freebsd-pf-unsubscribefreebsd.org"

_______________________________________________
freebsd-pffreebsd.org mailing list

http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to
"freebsd-pf-unsubscribefreebsd.org"

On 4/11/08, Alexander Vyrlanovich <iskanderapple-park.kiev.ua> wrote:
> I mean ifconfig carp0 carpdev iface
>  to attach carp pseudo-device to iface.
>
>  The goals is to have physical iface and attached carp
device
>  configured in different IP subnets like OpenBSD can
do.
>  (for example if ISP assign /30 subnet to me, where
only two IPs
>  can be located)

This is not native. There is a patch the implement this
feature. I use
this on 2 setups and I've no problem at all. Look the
archives.
_______________________________________________
freebsd-pffreebsd.org mailing list

http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to
"freebsd-pf-unsubscribefreebsd.org"