From owner-freebsd-stable@FreeBSD.ORG Thu Sep 11 17:39:24 2014 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C1637270 for ; Thu, 11 Sep 2014 17:39:24 +0000 (UTC) Received: from smtp2.wemm.org (smtp2.wemm.org [IPv6:2001:470:67:39d::78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp2.wemm.org", Issuer "StartCom Class 1 Primary Intermediate Server CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 9F9CABE2 for ; Thu, 11 Sep 2014 17:39:24 +0000 (UTC) Received: from overcee.wemm.org (canning.wemm.org [192.203.228.65]) by smtp2.wemm.org (Postfix) with ESMTP id 10703920; Thu, 11 Sep 2014 10:39:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wemm.org; s=m20140428; t=1410457164; bh=vSqqdHTJ1cKuz5WdKmO0yVDUPpt9pZvuPqceY/uokAI=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=c2EXVNJQJMCkVAZYAYIGXP9DhQI3vxv8LhGqsIqQEVXL0CPFA0rws70k4VW/zvGmY BA+tInsbxb1HPg1gjOeMAkHTYfr44pWqkZcmG9fH1/08By5wkDERlcxzpPKih7vqYv ogdS68hNUKokyW+shMPNANiQgop42fqP+Kk5iHg8= From: Peter Wemm To: freebsd-stable@freebsd.org Subject: Re: Using CARP with multiple IP aliases (FBSD 10.0) Date: Thu, 11 Sep 2014 10:39:19 -0700 Message-ID: <2401599.spj3ijL0cc@overcee.wemm.org> User-Agent: KMail/4.12.5 (FreeBSD/11.0-CURRENT; KDE/4.12.5; amd64; ; ) In-Reply-To: <7925563B043E419996CD7FEE8C7DFDB6@multiplay.co.uk> References: <7925563B043E419996CD7FEE8C7DFDB6@multiplay.co.uk> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart2430500.8OADSZRLu4"; micalg="pgp-sha1"; protocol="application/pgp-signature" Cc: Steven Hartland X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Sep 2014 17:39:24 -0000 --nextPart2430500.8OADSZRLu4 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" On Thursday, September 11, 2014 05:34:57 PM Steven Hartland wrote: > ----- Original Message ----- > From: "Freddie Cash" > To: "Steven Hartland" > Cc: "FreeBSD Stable" > Sent: Thursday, September 11, 2014 5:24 PM > Subject: Re: Using CARP with multiple IP aliases (FBSD 10.0) >=20 > > On Thu, Sep 11, 2014 at 8:54 AM, Steven Hartland > >=20 > > wrote: > >> I believe you need a seperate vhid per IP assuming you want each t= o fail > >> over > >> to another machine when it goes down e.g. > >> ifconfig igb0 inet 1.2.3.4/24 vhid 30 pass mypass > >> ifconfig igb0 inet 1.2.3.5/32 vhid 31 pass mypass alias > >> ifconfig igb0 inet 1.2.3.6/32 vhid 32 pass mypass alias > >> ifconfig igb0 inet 1.2.3.7/32 vhid 33 pass mypass alias > >=20 > > ifconfig igb0 inet 1.2.3.8/32 vhid 34 pass mypass alias > >=20 > >=20 > > =E2=80=8BThat's what I'm trying to avoid. :) And everything appea= rs to get added > > to the interf> >=20 > > ace correctly: > I can't say I've used it in that way and I'm not sure how carp decide= s how > to fail over when it has multiple IP's available. >=20 > I can confirm you don't need all the params when adding an IP to vhid= . > so you can for example configure the vhid and then add the IP's or do= > as you have done and configure it on the first IP. This is the method we use extensively in the freebsd.org cluster. eg: = the=20 routers have public IP addresses, private RFC1918, IPv6 etc addresses, = all on=20 the same vhid for each interface. * One vhid presence, with multiple aliases on the same vhid. * Configure vhid params once, aliases attached without params. carp state checking uses link local addresses to communicate. Having multiple IP's per vhid means they change master->backup state as= a=20 group, not individually and that's what we wanted for things like route= r=20 default gateways. =2D-=20 Peter Wemm - peter@wemm.org; peter@FreeBSD.org; peter@yahoo-inc.com; KI= 6FJV UTF-8: for when a ' or ... just won\342\200\231t do\342\200\246 --nextPart2430500.8OADSZRLu4 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAABAgAGBQJUEd5LAAoJEDXWlwnsgJ4EdIsIAL8a6qOpAosw6YoI0brMN2vU /ymChZSw7NGRYk/PunMAQwCKBGZSQlMImX44l8r5ST0D0I//nFyFi0fA9zCfK0P7 s46IMRuGC4Pd3Mvo4XrLAxxWBwHBqR8QrgNV+WlBxbLoDJ5rlN1VWA9pzVUuUmwD DSijMDO+MppGzX2cLq01082Hg7mAL3VNsSbEZJePALlqEFw15yqyYBImyvm9vEHc F8RIbl7GcmI617/Zxe+nb/OdnymZAJruW2JEXxN+xJvWkhAG6UzoC6RXgFRHq9ZG +vvULVn+rVg0jkTVUNYdhMc6sIEwNJgCJFEsWDXSHmxQXcmxQgycMPXJPPy8T1s= =ybvm -----END PGP SIGNATURE----- --nextPart2430500.8OADSZRLu4--