Firewall failover

Jaime Nebrera
2005-05-25T08:06:13Z

Hi all,

  We are investigating on firewall failover design. I have searched the
net and found that projects like LVS have it mostly solved for their
side but that netfilter lacks it.

  Of course, a simple failover of the firewall is available using things
like VRRP (KeepAlive software) but without state syncronization, and
that is preciselly the part we need to investigate.

  Is this issue solved in netfilter? How? Any ideas? Does it work with
kernel 2.4? And of course, can it be managed with shorewall? :)))

  Bear in mind I''m not talking about ISP redundancy but the firewall
itself, if possible set as an active/active failover solution.

  Thanks in advance. Regards.

--
Jaime Nebrera - jnebrera@eneotecnologia.com
Consultor TI - ENEO Tecnologia SL
Telf.- 95 455 40 62 - 619 04 55 18