Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 13 Aug 2007 17:19:35 -0700
From:      Chuck Swiger <cswiger@mac.com>
To:        Modulok <modulok@gmail.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Redundant network router setup?
Message-ID:  <5F59BCBE-FCEA-4D2A-8A69-E0CE9B3A86A0@mac.com>
In-Reply-To: <64c038660708131659m68620db9of8d93bd079d1fb29@mail.gmail.com>
References:  <64c038660708131659m68620db9of8d93bd079d1fb29@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Aug 13, 2007, at 4:59 PM, Modulok wrote:
> QUESTION: Is there a way to setup a redundant router, such that I can
> offload traffic from the primary router to another machine, without
> breaking TCP sessions?

There are several ways of setting up such redundancy; the common case  
which Cisco calls VRRP, you can use under FreeBSD as CARP.  However,  
this approach is limited to pure routing; it does not handle  
replicating the NAT state tables:

> BACKGROUND: I have a FreeBSD machine acting as a gateway, running
> natd(8) through ipfw(8).

...which you mention you are using.  I don't know of any way to  
provide redundancy for existing connections going via natd.

-- 
-Chuck




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5F59BCBE-FCEA-4D2A-8A69-E0CE9B3A86A0>