Questions tagged [carp]

an open protocol that allows multiple hosts to share a virtual IP address (VIP). The CARP protocol was originally designed and implemented by the OpenBSD developers. There are several other free implementations of it, including UCARP on Linux.

Filter by
Sorted by
Tagged with
4 votes
1 answer
255 views

Which LAGG type should be used for MLAG switches to CARP firewalls?

My network setup involves two firewalls in a Common Address Redundancy Protocol (CARP) group, each connected to an MLAG (Multi-Chassis Link Aggregation) configuration of Mikrotik switches. Onward ...
Tintin's user avatar
  • 193
0 votes
0 answers
309 views

CARP getting confused with 2 interconnected switches and bonding

I'm having a pretty straight forward 10G switch setup: +-----+----+ +-----+----+ | |port2 ISL port2| | | switch A +--------------------------+ ...
xsign's user avatar
  • 1
0 votes
1 answer
797 views

CARP + IPV6 failover

I am using a vSwitch from Hetzner with an IPv6 network, I have configured CARP and works as expected, but the problem that I have noticed is that either because my IPv6 configuration or the vSwitch, ...
nbari's user avatar
  • 568
0 votes
1 answer
1k views

pfsense with only carp addresses

I currently have two pfsense boxes with a standard carp setup as per the docs, it works great. Two part question here: how does anything even work? My experience when accidentally having two ips on ...
Kurt's user avatar
  • 211
4 votes
1 answer
1k views

Changing PF rules on the fly to mitigate damage of DDoS (OpenBSD 6.4)

This is a two part question, really. Keep in mind that I am a developer not a system admin, but being the only employee in the company, I wear ALL the hats. I have deployed my server with two ...
Miguel's user avatar
  • 171
3 votes
1 answer
119 views

How do I configure ZFS to panic on da (SCSI) disk failure?

Situation: two redundant FreeBSD machines using CARP to share a primary IP, running a frontend proxy (E.G. HAproxy or nginx) Primary machine experiences a loss of SCSI disk (E.G. disk failure, SAN ...
Josh's user avatar
  • 9,208
1 vote
1 answer
432 views

CARP: VIP on different interface and network

I'd like to use CARP between two systems with a VIP address, the VIP belonging to the master. The second system acts as a stand-by system which takes over the VIP in case the first system goes offline....
watain's user avatar
  • 151
0 votes
2 answers
572 views

carp single wan address

I try to put in place 2 freebsd routers with carp interfaces. since I have only one wan address, lets say : 1.2.3.4 I'd like to use private range ips to do carp jobs : 10.0.0.1(router1) alias (1.2.3....
goddard's user avatar
1 vote
1 answer
374 views

FreeBSD CARP doesn't work in VirtualBox with bridged adapter [closed]

I have two identical VirtualBox machines running FreeBSD. Their networking is set up using "Bridged Adapter" option. I've followed FreeBSD Handbook instructions step-to-step, but I still not able to ...
arrowd's user avatar
  • 319
1 vote
1 answer
573 views

Where did load balancing using FreeBSD CARP go?

In some old manuals I see net.inet.carp.arpbalance sysctl, that turns on load balancing between CARP'ed interfaces. Recent manuals (FreeBSD 10+) say nothing about it. Where did that feature go and ...
arrowd's user avatar
  • 319
1 vote
2 answers
818 views

WAN Static IP with Carp but different GW

I have the following problem, and I cannot find the solution, even after googling and reading the pfsense documentation. my ISP gave me the following information: Gateway: 1.2.3.254/32 Public IP: 5....
Alessandro Perucchi's user avatar
1 vote
1 answer
1k views

pfSense CARP seems to cause NIC issues

Within 12 hours of turning on HA we can't reach the webGUI, ping the pfSense machine, or have the pfSense machine ping anything. Prior to doing HA everything was working fine. After having this issue ...
Nicholas Yount's user avatar
0 votes
1 answer
2k views

Set an network interface in FreeBSD as DHCP-enabled, but totally silent until explicitly enabled

I'm setting up a FreeBSD carp router/firewall backup, my provider is giving out IP by DHCP, it's static and tied to MAC address of my NIC, so when carp switches state I'm trying to switch off the ...
Eugene Petrov's user avatar
1 vote
0 answers
1k views

pfSense 2.2: HAProxy for HTTP + CARP + MultiWAN with VIPs issue (Outbound NAT?)

I have two pfSense firewalls with CARP setup, 2 WANs and HAProxy that points to HTTP servers in my LAN. Scheme: **pfSense server #1** ISP#1 - Public IP1.1 - pfSense#1 with HAProxy - HTTP ISP#2 - ...
b0rman's user avatar
  • 11
0 votes
2 answers
1k views

Is it possible to configure carp using /etc/network/interfaces?

Lots of tutorials out there show to set-up carp using ifconfig: https://www.netbsd.org/docs/guide/en/chap-carp.html I'm wondering if it's possible to do the same using /etc/network/interfaces? For ...
moomima's user avatar
  • 497
0 votes
0 answers
2k views

site-to-site OpenVPN tunnel with PFSense + CARP enabled causes regular drops

I have two datacenters, and in each datacenter I have two pfSense 2.1.5 servers running in CARP failover mode. I've established a OpenVPN, shared-key tunnel between the two datacenters, pointing at ...
John P's user avatar
  • 1,689
2 votes
2 answers
1k views

Active CARP network loop

I have to setup, no matter what, a cluster of 3 active OpenBSD 5.5 with CARP on 3 separate ESXi 5.5 hosts. I think I'm close to the end but I have this message in /var/log/messages : carp0: replay ...
Ouioui's user avatar
  • 21
0 votes
2 answers
4k views

CARP Virtual IP does not ping in virtualized environment

We have three physical machines with SmartOS on them in a LAN. Two of them, 10.40.0.30 and 10.40.0.240 are hypervisors with two pfSense-based virtualized gateways on them. These gateways have 10.40.0....
Alex's user avatar
  • 7,969
0 votes
2 answers
763 views

pfSense CARP - WAN failure on firewall

I have recently configured 2 firewalls (on 2 DELL PowerEdge R210II with ESXI 5.1) with pfSense. We have several LANs and 2 WANs. Everything is running fine but I have a strange behavior: I can access ...
eldblz's user avatar
  • 395
2 votes
0 answers
1k views

Configure SSH while using UCARP for failover

I have SSH installed, and UCARP configured to fail over a virtual IP when one of the two boxes goes down. The problem that I'm having is when a VM is running, and the ucarp interface is active (eth0:...
EGr's user avatar
  • 629
5 votes
4 answers
13k views

Does two pfsense + CARP necessarily require two WAN IP?

I am looking to setup CARP following this guide across two pfSense firewalls. I have setup CARP before on a WAN link with a big IP space, so allocating a distinct WAN IP per each device (as shown in ...
tacos_tacos_tacos's user avatar
6 votes
2 answers
5k views

UCARP: prevent the original master from taking over the VIP when it comes back after failure?

Keepalived can do this by combining the nopreempt option and the BACKUP state on the both nodes: Prevent VRRP Master from becoming Master once it has failed Prevent master to fall back to master ...
quanta's user avatar
  • 51.8k
2 votes
1 answer
3k views

Physical network setup for pfsense w/ CARP for redundant firewalls

So I'm looking at this diagram: http://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_(CARP) Does this assume that the "DSL Router" at the top of the drawing has two physical RJ45 ...
Keith Palmer Jr.'s user avatar
3 votes
0 answers
3k views

Redundant Firewalls And Switches HSRP and CARP

I currently have planned 2 x uplinks (HSRP Active/Standby) 2 x pfsense firewalls (Carp Enabled) 2 x layer2 switches Please criticize or offer help on the correct way to do this. I have a feeling im ...
Arenstar's user avatar
  • 3,612
0 votes
1 answer
905 views

openbsd carp with multiple external vip's

Is there any way to setup multiple carp vip's without creating a separate hostname.if file for each address? Our colo has provided us with a /25 external network. Three addresses from this range are ...
user111499's user avatar
3 votes
1 answer
2k views

Heartbeat compared to CARP?

Provided I only require virtual IP (migrated between servers), is there any sense in using heartbeat, or CARP is enough?
SyRenity's user avatar
  • 3,189
5 votes
3 answers
2k views

*nix CARP or VMWare Fault Tolerance?

We're experimenting with what VMWare called a "Fully Collapsed DMZ" on blade centre. Basically our DMZ goes straight into a vSwitch and all the security appliances are virtualised. I've ...
Mark Henderson's user avatar
2 votes
1 answer
984 views

IPTables INPUT and ucarp

What rule(s) are needed to allow ucarp traffic on IPTables?
Kyle Brandt's user avatar
  • 84.3k
3 votes
2 answers
15k views

CARP: two machines think they're the master, but only on one interface

I have two machines, each configured identically as a firewall/load balancer for a busy website. I have set them up with CARP and pfsync on both the internal and external interfaces. The internal ...
Conor McDermottroe's user avatar
4 votes
3 answers
15k views

redundant openvpn configuration

I have two openbsd nat/firewall boxes with carp for failover / high availability purposes. What would be the best possible practice to ensure that OpenVPN, which I plan on running on these boxes, ...
imaginative's user avatar
  • 1,981
0 votes
1 answer
500 views

OpenLDAP running on OpenBSD + CARP setup

I'm setting up OpenLDAP on a router/firewall that's running OpenBSD + CARP + pfsync. Curious enough, I'm wondering what's my best approach to making sure the setup stays redundant between the two ...
imaginative's user avatar
  • 1,981