Questions tagged [carp]
an open protocol that allows multiple hosts to share a virtual IP address (VIP). The CARP protocol was originally designed and implemented by the OpenBSD developers. There are several other free implementations of it, including UCARP on Linux.
31
questions
4
votes
1
answer
356
views
Which LAGG type should be used for MLAG switches to CARP firewalls?
My network setup involves two firewalls in a Common Address Redundancy Protocol (CARP) group, each connected to an MLAG (Multi-Chassis Link Aggregation) configuration of Mikrotik switches. Onward ...
- 193
0
votes
0
answers
333
views
CARP getting confused with 2 interconnected switches and bonding
I'm having a pretty straight forward 10G switch setup:
+-----+----+ +-----+----+
| |port2 ISL port2| |
| switch A +--------------------------+ ...
- 1
0
votes
1
answer
830
views
CARP + IPV6 failover
I am using a vSwitch from Hetzner with an IPv6 network, I have configured CARP and works as expected, but the problem that I have noticed is that either because my IPv6 configuration or the vSwitch, ...
- 568
0
votes
1
answer
1k
views
pfsense with only carp addresses
I currently have two pfsense boxes with a standard carp setup as per the docs, it works great.
Two part question here:
how does anything even work? My experience when accidentally having two ips on ...
- 211
4
votes
1
answer
2k
views
Changing PF rules on the fly to mitigate damage of DDoS (OpenBSD 6.4)
This is a two part question, really. Keep in mind that I am a developer not a system admin, but being the only employee in the company, I wear ALL the hats.
I have deployed my server with two ...
- 171
3
votes
1
answer
120
views
How do I configure ZFS to panic on da (SCSI) disk failure?
Situation: two redundant FreeBSD machines using CARP to share a primary IP, running a frontend proxy (E.G. HAproxy or nginx)
Primary machine experiences a loss of SCSI disk (E.G. disk failure, SAN ...
- 9,278
1
vote
1
answer
480
views
CARP: VIP on different interface and network
I'd like to use CARP between two systems with a VIP address, the VIP belonging to the master. The second system acts as a stand-by system which takes over the VIP in case the first system goes offline....
- 151
0
votes
2
answers
589
views
carp single wan address
I try to put in place 2 freebsd routers with carp interfaces.
since I have only one wan address, lets say : 1.2.3.4
I'd like to use private range ips to do carp jobs :
10.0.0.1(router1) alias (1.2.3....
- 1
1
vote
1
answer
379
views
FreeBSD CARP doesn't work in VirtualBox with bridged adapter [closed]
I have two identical VirtualBox machines running FreeBSD. Their networking is set up using "Bridged Adapter" option. I've followed FreeBSD Handbook instructions step-to-step, but I still not able to ...
- 319
1
vote
1
answer
591
views
Where did load balancing using FreeBSD CARP go?
In some old manuals I see net.inet.carp.arpbalance sysctl, that turns on load balancing between CARP'ed interfaces. Recent manuals (FreeBSD 10+) say nothing about it.
Where did that feature go and ...
- 319
1
vote
2
answers
852
views
WAN Static IP with Carp but different GW
I have the following problem, and I cannot find the solution, even after googling and reading the pfsense documentation.
my ISP gave me the following information:
Gateway: 1.2.3.254/32
Public IP: 5....
1
vote
1
answer
1k
views
pfSense CARP seems to cause NIC issues
Within 12 hours of turning on HA we can't reach the webGUI, ping the pfSense machine, or have the pfSense machine ping anything. Prior to doing HA everything was working fine. After having this issue ...
0
votes
1
answer
2k
views
Set an network interface in FreeBSD as DHCP-enabled, but totally silent until explicitly enabled
I'm setting up a FreeBSD carp router/firewall backup, my provider is giving out IP by DHCP, it's static and tied to MAC address of my NIC, so when carp switches state I'm trying to switch off the ...
- 101
1
vote
0
answers
1k
views
pfSense 2.2: HAProxy for HTTP + CARP + MultiWAN with VIPs issue (Outbound NAT?)
I have two pfSense firewalls with CARP setup, 2 WANs and HAProxy that points to HTTP servers in my LAN.
Scheme:
**pfSense server #1**
ISP#1 - Public IP1.1 - pfSense#1 with HAProxy - HTTP
ISP#2 - ...
- 11
0
votes
2
answers
1k
views
Is it possible to configure carp using /etc/network/interfaces?
Lots of tutorials out there show to set-up carp using ifconfig:
https://www.netbsd.org/docs/guide/en/chap-carp.html
I'm wondering if it's possible to do the same using /etc/network/interfaces?
For ...
- 507
0
votes
0
answers
2k
views
site-to-site OpenVPN tunnel with PFSense + CARP enabled causes regular drops
I have two datacenters, and in each datacenter I have two pfSense 2.1.5 servers running in CARP failover mode.
I've established a OpenVPN, shared-key tunnel between the two datacenters, pointing at ...
- 1,709
2
votes
2
answers
1k
views
Active CARP network loop
I have to setup, no matter what, a cluster of 3 active OpenBSD 5.5 with CARP on 3 separate ESXi 5.5 hosts.
I think I'm close to the end but I have this message in /var/log/messages :
carp0: replay ...
- 21
0
votes
2
answers
4k
views
CARP Virtual IP does not ping in virtualized environment
We have three physical machines with SmartOS on them in a LAN. Two of them, 10.40.0.30 and 10.40.0.240 are hypervisors with two pfSense-based virtualized gateways on them. These gateways have 10.40.0....
- 8,029
0
votes
2
answers
800
views
pfSense CARP - WAN failure on firewall
I have recently configured 2 firewalls (on 2 DELL PowerEdge R210II with ESXI 5.1) with pfSense. We have several LANs and 2 WANs. Everything is running fine but I have a strange behavior: I can access ...
- 395
2
votes
0
answers
1k
views
Configure SSH while using UCARP for failover
I have SSH installed, and UCARP configured to fail over a virtual IP when one of the two boxes goes down. The problem that I'm having is when a VM is running, and the ucarp interface is active (eth0:...
- 629
5
votes
4
answers
13k
views
Does two pfsense + CARP necessarily require two WAN IP?
I am looking to setup CARP following this guide across two pfSense firewalls.
I have setup CARP before on a WAN link with a big IP space, so allocating a distinct WAN IP per each device (as shown in ...
- 3,250
6
votes
2
answers
5k
views
UCARP: prevent the original master from taking over the VIP when it comes back after failure?
Keepalived can do this by combining the nopreempt option and the BACKUP state on the both nodes:
Prevent VRRP Master from becoming Master once it has failed
Prevent master to fall back to master ...
- 52.1k
2
votes
1
answer
3k
views
Physical network setup for pfsense w/ CARP for redundant firewalls
So I'm looking at this diagram:
http://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_(CARP)
Does this assume that the "DSL Router" at the top of the drawing has two physical RJ45 ...
- 1,173
3
votes
0
answers
3k
views
Redundant Firewalls And Switches HSRP and CARP
I currently have planned
2 x uplinks (HSRP Active/Standby)
2 x pfsense firewalls (Carp Enabled)
2 x layer2 switches
Please criticize or offer help on the correct way to do this.
I have a feeling im ...
- 3,608
0
votes
1
answer
923
views
openbsd carp with multiple external vip's
Is there any way to setup multiple carp vip's without creating a separate hostname.if file for each address?
Our colo has provided us with a /25 external network. Three addresses from this range are ...
3
votes
1
answer
2k
views
Heartbeat compared to CARP?
Provided I only require virtual IP (migrated between servers), is there any sense in using heartbeat, or CARP is enough?
- 3,189
5
votes
3
answers
2k
views
*nix CARP or VMWare Fault Tolerance?
We're experimenting with what VMWare called a "Fully Collapsed DMZ" on blade centre. Basically our DMZ goes straight into a vSwitch and all the security appliances are virtualised.
I've ...
- 69.2k
2
votes
1
answer
996
views
3
votes
2
answers
15k
views
CARP: two machines think they're the master, but only on one interface
I have two machines, each configured identically as a firewall/load balancer for a busy website. I have set them up with CARP and pfsync on both the internal and external interfaces. The internal ...
4
votes
3
answers
16k
views
redundant openvpn configuration
I have two openbsd nat/firewall boxes with carp for failover / high availability purposes. What would be the best possible practice to ensure that OpenVPN, which I plan on running on these boxes, ...
- 1,991
0
votes
1
answer
510
views
OpenLDAP running on OpenBSD + CARP setup
I'm setting up OpenLDAP on a router/firewall that's running OpenBSD + CARP + pfsync. Curious enough, I'm wondering what's my best approach to making sure the setup stays redundant between the two ...
- 1,991