From owner-freebsd-virtualization@freebsd.org Tue Mar 1 21:03:09 2016 Return-Path: Delivered-To: freebsd-virtualization@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D1168ABF5AD for ; Tue, 1 Mar 2016 21:03:09 +0000 (UTC) (envelope-from nvass@gmx.com) Received: from mout.gmx.net (mout.gmx.net [212.227.17.20]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mout.gmx.net", Issuer "TeleSec ServerPass DE-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 36EA81445 for ; Tue, 1 Mar 2016 21:03:09 +0000 (UTC) (envelope-from nvass@gmx.com) Received: from moby.local ([79.107.48.254]) by mail.gmx.com (mrgmx101) with ESMTPSA (Nemesis) id 0Mhdex-1aEffU29oZ-00Mu79; Tue, 01 Mar 2016 21:57:23 +0100 From: Nikos Vassiliadis Subject: Re: bhyve and CARP? To: dweimer@dweimer.net, freebsd-virtualization@freebsd.org References: Message-ID: <56D6022A.8030808@gmx.com> Date: Tue, 1 Mar 2016 22:57:14 +0200 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K0:MahXNBvzAMVWqRHh70t/GIqPMrLiJ3wHchf6fP8EYUPYUEYtvu+ DEpBHTmEwsmKVBMH7LKnYwXRSYt/CQYbnm6zw9cP0ygoln/euzmjRhrLDiDbrvCzej+w2Ay I3S9rIMU6Xm1z40hgNCSLGETgs3RZYAHbca9enofAvmdkZZB2XH+OYiG6gJv1qrvadduSY3 qiMNgX2BzeBi2r57isPmA== X-UI-Out-Filterresults: notjunk:1;V01:K0:orUizNyvdxo=:SivL1dDqpbEuOn1aftCJzI edKaqE5Nopjagh8kCDusnH+sDbOOjKjdp8WJo1qpDl9349f2dAyTg5vst3gZ1eE0MkFJCPLxS TIVRcW+ZGIiubMYPpSM3lgCW8dMyggOH6z/cLaSBpzFhq/HVJKxIH4lwQGTgpa7MYZsaFDlcQ 00kzFFviv4PtnTcDC9e70yzoX32zv1sdr0Ib1jSUUBxPkx52HotH2sbX6JY+9+AO8NQO2/m1I /STehvaP8wvzR7wTF0n5e4PaqkuWTeOqMHDvJ6GOnvxxzDH3+tIgADr7Tqiv5rCt2AgPH05g/ b1wFhRIeaTXHk/Kq5omclWDCmJk8a2hp+SCKATCx2GFbJysXkNo+h25gIG91YTYCcKHCJK0P7 hN58YKZgikEvcrJ6i+KrwkCXoqYkZxfIqlE96Ht5bCXB/Z62xQBO5+JVYYL7FUL7ib+3zabg8 C9QQ5SwpBr4b4Zf6fyGa2q63JnMUyaNBj9Of/Ajh14tytrH66bgdYoGAMy0PHgyktpuNhE832 Mk5ekq/5AnuwU6BRfFy0gam1Hyce6IKrIzeX6n0SOqOuSIrH1IXP9pBJSxDSQNIgkESdWaQ4K x7aqHirtKUi3FF6EVL734BTA48IAFdjfcA64FfELstUn1lsUHBwa7HAZAfnDd2y+YLnmyGcsV rIj+P+NjZfiyN2DZpcePHq+UohjduSZ6bphEMxBm8Y1IvKCCQWh9HX2BvV9vCVF9AqsVREmfd /h6klbYvwmNmkobBU0Dzrcs5m62jeP9Gdy8twReySk/+fH+6p9GIjvuBXeQ6gAEc5jBRrMR5j 0tRORwC X-BeenThere: freebsd-virtualization@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Discussion of various virtualization techniques FreeBSD supports." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Mar 2016 21:03:09 -0000 Hi, On 03/01/16 18:43, dweimer wrote: > I am considering setting up a bhyve virtual machine to run pfSense. Not > too thrilled with the CPU heat on the PC Engines APU1D4 when under heavy > load, but don't want to rely entirely on a VM. As I like still having > internet if I would have to take my server offline for disk replacement > or other issues, having web access to search for errors is a big plus. > So in order to avoid spending money on a new piece of hardware I thought > why not do a VM with CARP fail over to the physical. I am not finding > much searching on FreeBSD byhve and CARP, I know its somewhat of an > issue withing VMware on ESX making sure you enable the right options on > the virtual switches and interfaces. > > Enable promiscuous mode on the vSwitch > Enable "MAC Address changes" > Enable "Forged transmits" > > Before I got started on the setup I was curious if anyone has done > something similar, or know if this isn't possible on bhyve at the > current version? I am running my system currently on 10.3-BETA3. > I am running two postgres VMs with DRBD and not CARP but UCARP which should be 100% compatible with CARP. Each VM has a tap interface and each tap is bridged to a bridge interface. There is no need for special configuration. Everything works as expected. HTH, Nikos