From owner-freebsd-virtualization@freebsd.org  Tue Mar  1 20:37:05 2016
Return-Path: <owner-freebsd-virtualization@freebsd.org>
Delivered-To: freebsd-virtualization@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id C2EB4ABE295
 for <freebsd-virtualization@mailman.ysv.freebsd.org>;
 Tue,  1 Mar 2016 20:37:05 +0000 (UTC)
 (envelope-from julian@freebsd.org)
Received: from vps1.elischer.org (vps1.elischer.org [204.109.63.16])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "vps1.elischer.org",
 Issuer "CA Cert Signing Authority" (not verified))
 by mx1.freebsd.org (Postfix) with ESMTPS id 9F9A41004
 for <freebsd-virtualization@freebsd.org>; Tue,  1 Mar 2016 20:37:05 +0000 (UTC)
 (envelope-from julian@freebsd.org)
Received: from julian-mbp3.pixel8networks.com
 (50-196-156-133-static.hfc.comcastbusiness.net [50.196.156.133])
 (authenticated bits=0)
 by vps1.elischer.org (8.15.2/8.15.2) with ESMTPSA id u21Kb3K5043682
 (version=TLSv1.2 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO)
 for <freebsd-virtualization@freebsd.org>; Tue, 1 Mar 2016 12:37:04 -0800 (PST)
 (envelope-from julian@freebsd.org)
Subject: Re: bhyve and CARP?
To: freebsd-virtualization@freebsd.org
References: <cf045594cf28b5dc5d89ecc2148c2fd4@dweimer.net>
From: Julian Elischer <julian@freebsd.org>
Message-ID: <56D5FD6A.9070205@freebsd.org>
Date: Tue, 1 Mar 2016 12:36:58 -0800
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0)
 Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
In-Reply-To: <cf045594cf28b5dc5d89ecc2148c2fd4@dweimer.net>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-virtualization@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: "Discussion of various virtualization techniques FreeBSD supports."
 <freebsd-virtualization.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-virtualization>, 
 <mailto:freebsd-virtualization-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-virtualization/>
List-Post: <mailto:freebsd-virtualization@freebsd.org>
List-Help: <mailto:freebsd-virtualization-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-virtualization>, 
 <mailto:freebsd-virtualization-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Mar 2016 20:37:05 -0000

On 1/03/2016 8:43 AM, dweimer wrote:
> I am considering setting up a bhyve virtual machine to run pfSense. 
> Not too thrilled with the CPU heat on the PC Engines APU1D4 when 
> under heavy load, but don't want to rely entirely on a VM. As I like 
> still having internet if I would have to take my server offline for 
> disk replacement or other issues, having web access to search for 
> errors is a big plus. So in order to avoid spending money on a new 
> piece of hardware I thought why not do a VM with CARP fail over to 
> the physical. I am not finding much searching on FreeBSD byhve and 
> CARP, I know its somewhat of an issue withing VMware on ESX making 
> sure you enable the right options on the virtual switches and 
> interfaces.
>
> Enable promiscuous mode on the vSwitch
> Enable "MAC Address changes"
> Enable "Forged transmits"
>
> Before I got started on the setup I was curious if anyone has done 
> something similar, or know if this isn't possible on bhyve at the 
> current version? I am running my system currently on 10.3-BETA3.
>
this makes one wonder if it would be possible to run the pfsense code 
in a vnet Jail.