search for: keepalived

I have 2 firewall in HA with keepalived. Can I use active the same tinc configuration on 2 firewalls ? using tun Interface with same ip on all 2 nodes is a problem ? tun device advertise itself on the network having an IP/MAC pairs (ARP) or the IP is only used by the system internally for routing so using the same configuration is right...

Prior to upgrading to CentOS 7.4 everything was fine, after upgrade I'm seeing /etc/keepalived# keepalived -f /etc/keepalived/keepalived.conf --dont-fork --log-console --log-detail --dump-conf -m -v Starting VRRP child process, pid=17224 Registering Kernel netlink reflector Registering Kernel netlink command channel Registering gratuitous ARP shared channel Opening file '/etc/keepalived...

Hey guys, I'm trying to install keepalived 1.2.19 on a centos 6.5 machine. I did an install from source. And when I start keepalived this is what I'm seeing in the logs. It's reporting that the VRRP_Instance(VI_1) Now in FAULT state. Here's more of that log entry: Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_vrrp[44943]: VRRP I...

There was a lengthy power failure here in Shoreline this morning and my firewall did not come back up when power was restored. The firewall is now up and service to the server has been restored. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \

This is a vpn for Disater Recovery sites, so it is not necessary to have a seamless failover, strictly speaking. Encryption instead is mandatory. Testing we found that on Keepalived failover remote Tinc take few seconds to reset the connection and correctly re-connect to the new active firewall (probably new firewall resetting the connection + PingTimeout + some seconds to reconnect). This is acceptable as replication mechanisms know about e WAN connection so all of that work...

hello, all! if i want to use lvs function of keepalived , i must install ipvsadm ? tks! -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos/attachments/20110308/b8e27203/attachment-0002.html>

...16.1.10 00:50:56:2b:12:e6 VMware, Inc. (DUP: 5) So my assumptions were wrong ! :D Probably Virtual network Interface does not send ARP, but Physical Network with the same IP address range advertise this address generating conflict with active firewall / tinc machine. I'm to tie Keepalived and Tinc no this HA Firewall configuration... Thank you Roberto -----Original Message----- From: tinc [mailto:tinc-bounces at tinc-vpn.org] On Behalf Of Saverio Proto Sent: mercoled? 27 gennaio 2016 11.58 To: tinc <tinc at tinc-vpn.org> Subject: Re: HA firewall with tinc Hello...

...as on a normal ethernet interface. Cheers Saverio 2016-01-27 10:32 GMT+01:00 mlist <mlist at apsystems.it>: > This is a vpn for Disater Recovery sites, so it is not necessary to have a seamless failover, strictly speaking. Encryption instead is mandatory. > Testing we found that on Keepalived failover remote Tinc take few seconds to reset the connection and correctly re-connect to the new active firewall (probably new firewall resetting the connection + PingTimeout + some seconds to reconnect). > This is acceptable as replication mechanisms know about e WAN connection so all of that...

Is anyone successfully using dag's keepalived-1.1.10-1.1.el3.rf on centos 3.4? It's giving me some strange issues (LVS Topology never shows up, even though I can manually set it w/ ipvsadm) Attempting to rebuild it has been less than successful, as anyone who tries will see in their appropriate BUILD/keepalived-1.1.10/config.log and in...

...ta and Enhancement Advisory 2015:0703 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-0703.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 893386b534fbeda5a2f1702fab60cc087b037ece82635bb316c3e13fb5856e83 keepalived-1.2.13-5.el6_6.i686.rpm x86_64: 6c88615dc0b9c73269b68caa66a095951a213c2e080ee21a43e8ca25c280771c keepalived-1.2.13-5.el6_6.x86_64.rpm Source: 0f3772f42bbc8a90d420d077c1c147ccfa04b9a302c4566be5683b6157dd4664 keepalived-1.2.13-5.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.cento...

Hi, I have HA firewalls configuration (keepalived) on one site. Each firewall has its own IP and a Virtual IP (VIP) that keepalived activate on one of the firewall (active/passive HA configuration). I think I can set all two firewalls with same configuration, generating key pairs on one firewall and copying that to the second, so the remote host c...

...29-09-2015 15:03, Gordon Messmer escreveu: > On 09/29/2015 09:14 AM, Tim Dunphy wrote: >> And if I do an ifconfig command I see no evidence of an eth1 existing. > > "ifconfig -a" will show you all of your interfaces. Maybe there is a confusion here. Sounds like Tim thought keepalived would create that eth1, like a tunnel interface, but it won't. You have to specify an interface that actually exists so that the VIP address will be added as a secondary address to ip to that interface. HTH Marcelo

...rrata and Bugfix Advisory 2017:1305 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-1305.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 14c601eb6b4c0822d34a1d0b1feaca81c00f8dd95c1b4ea6a5dfd9d504185c25 keepalived-1.2.13-9.el7_3.x86_64.rpm Source: 752388388e2c865992c38ab3f7079ee5f470ac61cbc7cde1136d6462b29d22a4 keepalived-1.2.13-9.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net Twitter: @JohnnyCentOS

...Errata and Bugfix Advisory 2019:1877 Upstream details at : https://access.redhat.com/errata/RHBA-2019:1877 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 259a12a1d3cd1c507dcfbd58d6d6fc63113a2e4ed7c1f5b061526d2426712b5c keepalived-1.3.5-8.el7_6.5.x86_64.rpm Source: cd0625ad7d6b58ab181b39b849e2021e9ad790a3d6b31228a28e12e28c7e0411 keepalived-1.3.5-8.el7_6.5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net Twitter: @JohnnyCentOS

Hello, I get this error when trying to build Keepalived 1.2.1 on a CentOS-4 box: # gcc -g -O2 (..) -D_WITH_LVS_ -D_WITH_VRRP_ -c smtp.c In file included from ../include/vrrp.h:31, from ../include/smtp.h:34, from smtp.c:27: *../include/vrrp_ipaddress.h:32:27: linux/if_addr.h: No such file or directory* In file inclu...

Hello, We are using CentOS 6.6 and keepalived 1.2.13 on two servers for failover, no load-balancing. Failover is governed by the NIC being present, and the Apache and Tomcat processes being present. Both servers are configured as 'EQUAL' (not master/backup). An initial priority of 100 is set, and if a process or NIC fails, then this is...

...OS: All Status: NEW Severity: enhancement Priority: P5 Component: conntrack-daemon Assignee: netfilter-buglog at lists.netfilter.org Reporter: ralf at os-s.de Hi, I have a setup based on Ubuntu 18.10 using conntrackd and keepalived for a ha-firewall. When stress-testing the system by stopping and starting keepalived eventually the conntrackd segfaults. Nov 4 15:29:46 host conntrackd[1122]: [Mon Nov 4 15:29:46 2019] (pid=1122) [notice] committing all external caches Nov 4 15:29:46 host Keepalived_logscript: user.info GROUP VG...

I am trying to figure out a way to have the two packages running on the system. Is there a way to tell shorewall NOT to define IP addresses for a specific port so keepalived(vrrp) can create them and not cause a conflict. Or for that matter the other way around would work. Any help would be appreciated.

...Security Advisory 2019:0022 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0022 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 4171b23d7282f67bd3938bcac81eee43583a4936513b5e5346e958087bed3b86 keepalived-1.3.5-8.el7_6.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net Twitter: @JohnnyCentOS

Ok, I think synching 2 firewalls are best solution with keepalived active/passive HA, too. I'll try this solution to see if all goes straitforward between failover/failback and tinc communications. Thank you Guus. Best regards Roberto -----Original Message----- From: tinc [mailto:tinc-bounces at tinc-vpn.org] On Behalf Of Guus Sliepen Sent: venerd? 22 gen...