Date: Thu, 06 Dec 2007 07:05:13 +0000 From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: "Michael K. Smith - Adhost" <mksmith@adhost.com> Cc: questions@freebsd.org Subject: Re: PF - Carp and vhid limitations Message-ID: <47579F29.4030601@infracaninophile.co.uk> In-Reply-To: <17838240D9A5544AAA5FF95F8D52031602E54396@ad-exh01.adhost.lan> References: <17838240D9A5544AAA5FF95F8D52031602E54396@ad-exh01.adhost.lan>
next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Michael K. Smith - Adhost wrote:
> I'm interested in using PF to front a web farm where there will be
> lots of static IP addresses for SSL affinity. As such, I expect to
> have many more than 255 CARP interfaces. But, as I understand it,
> I'm limited to 255 vhid's and I have to have a discreet vhid per CARP
> interface.
>
> Is there a way to configure my CARP interfaces such that I can get
> around this limitation? Right now, I configure everything as:
carp interfaces are synthetic NICs. You can use more than one IP per
carp interface just by adding them as aliases:
ifconfig_carp0="vhid 100 pass XXXXXXXXXXXXX 12.34.56.78/24"
ifconfig_carp0_alias0="inet 12.34.56.79/32"
ifconfig_carp0_alias1="inet 12.34.56.80/32"
You should only need as many carp interfaces as there are fail-over
pairs of physical servers in your configuration.
Cheers,
Matthew
- --
Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard
Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
Kent, CT11 9PW
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFHV58p8Mjk52CukIwRCGG0AJ9QYNiqFmZh68bO9CNPkwRrNgNnFgCfaejM
2FDwtxY6JcmhToOujViuacY=
=GpU/
-----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?47579F29.4030601>