Skip site navigation (1)Skip section navigation (2) 
Date:      Tue, 06 Feb 2007 22:37:20 +0000
From:      Richard Tector <richardtector@thekeelecentre.com>
To:        "Michael K. Smith - Adhost" <mksmith@adhost.com>
Cc:        freebsd-pf@freebsd.org
Subject:   Re: PFSync Not Working Correctly
Message-ID:  <45C90320.7030207@thekeelecentre.com>
In-Reply-To: <17838240D9A5544AAA5FF95F8D52031601A8BD24@ad-exh01.adhost.lan>
References:  <17838240D9A5544AAA5FF95F8D52031601A8BD24@ad-exh01.adhost.lan>
next in thread | previous in thread | raw e-mail | index | archive | help 

[-- Attachment #1 --]
Michael K. Smith - Adhost wrote:
> Hello All:
> 
> I have two 6.2 RELEASE servers working in failover mode as PF Load
> Balancers.  When the MASTER box is failed (through reboot or interface
> shutdown, etc.) the BACKUP box becomes MASTER as expected, but
> connections that existed through the MASTER before the failover do not
> transfer as expected to the new MASTER.  New connections work
> immediately.
> 
> When I issue a 'pfctl -vvss' the established connection shows up
> correctly in the state tables on both machines, so I would expect the
> established connection to work immediately upon failover.  
> 
> If anyone has any insights I'd be grateful.  I can also post any
> relevent output or config snippets if someone thinks they would help.

Are the interfaces the same in both machines? If the states are 
if-bound, they wont match packets on the backup server if the interface 
names are different.


Regards,

Richard

[-- Attachment #2 --]
0	*H
010	+0	*H
<000
	*H
010	UUK10U
Staffordshire10UKeele10U
The Keele Centre1/0-U&The Keele Centre Certificate Authority0
060929142538Z
100929142538Z010	UUK10U
Staffordshire10U
The Keele Centre10URichard Tector1/0-	*H
	 richardtector@thekeelecentre.com00
	*H
0;tbTjRsםN)B?fS?PYȑgxK?w;]؆!Lo -{,CzL`X0oA,!
00	U00,	`HB
OpenSSL Generated Certificate0Uy56N|Ad¯.H0U#0	4@-MxoW010	UUK10U
Staffordshire10UKeele10U
The Keele Centre1/0-U&The Keele Centre Certificate Authority	Xl~u0
	*H
>a<<,a,u#8gfryQ31Zr_?&tIooݔ_@ѝƶl!=7,CYE2&e5ss8 &K000
	*H
010	UUK10U
Staffordshire10UKeele10U
The Keele Centre1/0-U&The Keele Centre Certificate Authority0
060929142538Z
100929142538Z010	UUK10U
Staffordshire10U
The Keele Centre10URichard Tector1/0-	*H
	 richardtector@thekeelecentre.com00
	*H
0;tbTjRsםN)B?fS?PYȑgxK?w;]؆!Lo -{,CzL`X0oA,!
00	U00,	`HB
OpenSSL Generated Certificate0Uy56N|Ad¯.H0U#0	4@-MxoW010	UUK10U
Staffordshire10UKeele10U
The Keele Centre1/0-U&The Keele Centre Certificate Authority	Xl~u0
	*H
>a<<,a,u#8gfryQ31Zr_?&tIooݔ_@ѝƶl!=7,CYE2&e5ss8 &K100010	UUK10U
Staffordshire10UKeele10U
The Keele Centre1/0-U&The Keele Centre Certificate Authority0	+0	*H
	1	*H
0	*H
	1
070206223720Z0#	*H
	1D4X̰
0R	*H
	1E0C0
*H
0*H
0
*H
@0+0
*H
(0	+710010	UUK10U
Staffordshire10UKeele10U
The Keele Centre1/0-U&The Keele Centre Certificate Authority0*H
	1010	UUK10U
Staffordshire10UKeele10U
The Keele Centre1/0-U&The Keele Centre Certificate Authority0
	*H
oYI2PT/G_h]D-
!Pu
~
dvLB,BN	A$\i >ӤjHhp]:\,
s+

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?45C90320.7030207>