similar to: VRRPD (rfc2338)

Hi. Is anyone using conntrack-tools to implement gateway failover on a network with windows clients? I set it up with ucarp and keepalived, and found that gratuitous ARP doesn''t always seem to update the cache on Windows machines. It works the first time, but if a second failover happens, the client continues to send stuff to the wrong MAC address. Linux machines work fine.

Hi. I''m wondering if there''s a good way to configure a Linux firewall box to failover to a single backup server, while preserving connection state. This question has been asked before, but the latest reference I can find is from 2004, at which time Linux had no equivalent of OpenBSD''s pfsync, though Harald was said to be working on one. Did anything come of those

Hello, Could someone experienced suggest good solution for failover advanced router ? The router for which I need redundancy is quite complex: 1) has 5 interfaces 2) uses the same network and the other network IP aliases on some interfaces 3) uses bunch of policy routing rules 4) uses proxyarp feature on some interfaces 5) uses complex iptables setup [propably not important in this

https://bugzilla.netfilter.org/show_bug.cgi?id=1381 Bug ID: 1381 Summary: Conntrackd segfaults when committing external caches Product: conntrack-tools Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: conntrack-daemon

Hi all! I think I remember there have discussion on this topic on this mailinglist a while ago. But the archives don''t find anything. Did anyone here set up a configuration with shorewall and heartbeat or vrrpd or ucarp? What would you prefer? Any experiences with failover times, setup problems etc? Good documentation on this? Thanks, Christian -- you don''t need eyes to see

Hi all, We are investigating on firewall failover design. I have searched the net and found that projects like LVS have it mostly solved for their side but that netfilter lacks it. Of course, a simple failover of the firewall is available using things like VRRP (KeepAlive software) but without state syncronization, and that is preciselly the part we need to investigate. Is this issue

Hello, First , thanks to Tom for it''s great job ! Netfilter is really easy and powerfull with shorewall. So, I have configured two firewalls whith shorewall using keepalived for the redundant VRRP stuff. FW-a is MASTER and FW-b is BACKUP. Everything works correctly and FW-b upgrade to MASTER when FW-a is down or disconnected. FW-b downgrade to BACKUP when FW-a comes back. But when I

Hello GlusterFS users, can anybody give me please his opinion about the following facts and questions: 4 storage server with 16 SATA bays, connected by GigE: Q1: Volume will be set up as distributed-replicated. Maildir, FTP Dir, htdocs, file store directory => as sub dir's in one big GlusterVolume or each dir in it's own GlusterVolume? Q2: Set up the bricks as a collection of

I am currently using shorewall on leaf-bering. I have set it up with keepalived to create a high availabilty firewall cluster. I have an odd question in regards to shorewall. Currently in production I have keepalived controlling shorewall starts and stops. If I remove this and leave shorewall running on the backup firewall, will I run into any problems with having the nat tables built out and

Hello all, We have quite a bit of environment on "cloud". We are using our own domain names. For this purpouse we stood up a BIND9 DNS instance on Centos 7. And, this being the cloud, we enabled key based dynamic DNS for instances to register themselves when they are spun-up. We have a single master and multiple slaves. all is well, untill mater goes down and we need to spin-up

Hello List: Recently our shorewall FW server went dead (PS failure) & brought the entire system down. Luckily we are testing the FW and other servers, so we did not loose anything. Now we have decided to setup two Shorewall FW servers with a primary & another fallover FW server. I have done some research cruised the Internet and found that a product ''UCARP''

I''d like to setup a box with 2 NICs as a firewall which will also rate limits outbound traffic. What happens when/if that box hangs or is rebooted? I''d like a solution that when there is a failure, traffic can still go through the box even though the firewall and rate limiting functions will no longer be in effect. I believe that this is "failing closed" but have

There was a lengthy power failure here in Shoreline this morning and my firewall did not come back up when power was restored. The firewall is now up and service to the server has been restored. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \

Hey guys, I'm trying to install keepalived 1.2.19 on a centos 6.5 machine. I did an install from source. And when I start keepalived this is what I'm seeing in the logs. It's reporting that the VRRP_Instance(VI_1) Now in FAULT state. Here's more of that log entry: Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_vrrp[44943]: VRRP Instance = VI_1 Sep 29 12:06:58 USECLSNDMNRDBA

On 27/06/2017 00:49, James A. Peltier wrote: > Bind does not have a method to do multi-master replication. All updates must be done via an intermediary service (database). > > In our case, we've used containers and Consul for providing a highly available DNS service. A container will fire up and race for the master lock. It will dump the contents of the database into its named

We're supposed to provide redundant firewall service. I'm wondering if anyone has ever tried to do this and if it's realistic. Basically 2 firewall machines hooked up so if one fails the other will transparently step in. I've googled it to death without much luck. The security issue here lies in that the 2 firewalls can't talk to each other. So if I'm keeping state on

Em 29-09-2015 15:03, Gordon Messmer escreveu: > On 09/29/2015 09:14 AM, Tim Dunphy wrote: >> And if I do an ifconfig command I see no evidence of an eth1 existing. > > "ifconfig -a" will show you all of your interfaces. Maybe there is a confusion here. Sounds like Tim thought keepalived would create that eth1, like a tunnel interface, but it won't. You have to

rsync version 2.4.6 protocol version 24 gin@rhysling:~> rsync -avv ~/share/cvs-xemacs-head/XEmacs/xemacsweb ~/share/public_html/xemacsweb building file list ... done ... xemacsweb/About/XEmacsServices.content is uptodate ... gin@rhysling:~> ls -l {~/share/cvs-xemacs-head/XEmacs/xemacsweb,~/share/public_html/xemacsweb}/About/XEmacsServices.content -rw-r--r-- 1 gin sdu

Hi!I've a question: I've 2 asterisk, I want pull the ethernet wire and then reconnect it after 5 second, using the VRRP protocol, where must I set the IP for the connection goes on the second asterisk? I want this: I call to asterisk1, then I pull the ethernet wire down, vrrp makes up the other asterisk but not the audio streaming...the callers are always pointed to asterisk1, but for the

I am setting up 2 Vyatta routers that will serve as redundant failover core routers out to the backbone of our ISP. They will be serving for routing between other branches and the ISP and bandwidth management. I am trying to differentiate between the plethora of information about having redundant, automatic failover routers and pretty much decided on VRRP for the IP address failover mechanism. I