Date: Tue, 28 Aug 2007 11:29:31 +0200 From: Gergely CZUCZY <phoemix@harmless.hu> To: freebsd-net@freebsd.org Subject: carp on multiple interfaces Message-ID: <20070828092931.GA18240@harmless.hu>
next in thread | raw e-mail | index | archive | help
--EeQfGwPcQSOJBaQU
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Hello
This question just popped out of my head today when playing
around with linux's LVS and keepalived.
On a dual-carp scenario on two gateways when both the internal and
the external IFs are carp(4)'d in a master-slave way and a link
disconnects only on one side, would this trigger a carp failover
of the other interface also?
Like in the local side 10.0.0.{1,2} are the IF IPs and .3 is the
carp IP, whereas the 1.2.3.{1,2,3} IPs are respectively the public
IF and carp IPs. If the link on the IF of 1.2.3.1 goes DOWN, then
the 1.2.3.3 should be failed over to the .2(slave) box, right?
Now, on the local side still the .1(master) box has the carp'd IP
because everything works fine in the LAN carp setup.
This would turn out to be a tricky situation, because the local clients
would get network-unreachable because the default local gateway had lost
its outgoing connection, and the incoming connections would also time out
because the clients would send the SYN+ACK replies over the master box,
whereas that had lost its outgoing connection.
Am i right that the FreeBSD carp(4) implementation has this issue?
I don't have the opportunity to try this at the moment, but I'm interested
in the way it would behave in a scenario like this. Had anyone met this
already? Are there any workarounds/solutions for this?
Thanks in advance
Sincerely,
Gergely Czuczy
mailto: gergely.czuczy@harmless.hu
--=20
Weenies test. Geniuses solve problems that arise.
--EeQfGwPcQSOJBaQU
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (FreeBSD)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=Y9Kb
-----END PGP SIGNATURE-----
--EeQfGwPcQSOJBaQU--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070828092931.GA18240>