Questions tagged [vrrp]

VRRP stands for the Virtual Router Redundancy Protocol and uses a virtual IP address to provide high availability for a service. It is often used to provide a virtual IP address for load balancers or default gateways.

Filter by
Sorted by
Tagged with
0 votes
0 answers
46 views

The packet goes through the other router

I want to connect two hosts in parallel with two different models of virtual routers. These are made redundant by VRRP. Originally, packets are sent through only one of the routers. However, when the ...
user avatar
  • 1
0 votes
1 answer
176 views

Keepalived going split brain when Firewalld is running

I'm using keepalived to provide availability between two Alma 8 Nginx servers (hosted on VMWare if that's of any relevance). When firewalld is enabled, despite a rich rule being set for VRRP, when I ...
user avatar
0 votes
0 answers
42 views

keepalived(or another solutions) between 2 interfaces one server

community. Could you help me with the next question? I'll have a server Linux with 2 NIC in the same network ens33 192.168.23.2 ens34 192.168.23.3 and plugin in different switches: I want to use ...
user avatar
0 votes
0 answers
45 views

How to setup HA Application Cluster on SD-WAN (Fortigate) across sites

I've had experience building simple HA clusters with HAProxy and Keepalived on a single network and have a general idea how to do it when I control all the pieces (or in AWS). But here is my question ...
user avatar
  • 1
0 votes
0 answers
31 views

Is that possible to assign a virtual IP to the K8s cluster

I have HAproxy in front of my K8s cluster. Here is my HAProxy configuration about the front-end and back-end sections to load-balancing traffic to the pod in the K8s infrastructure. frontend ...
user avatar
  • 151
1 vote
0 answers
247 views

How to shutdown keepalived without releasing the VIP

Usually it is a good thing that when keepalived shuts down, it releases the virtual IP address (VIP) via VRRP and removes the address from the local interface so that other instances can take it over. ...
user avatar
  • 1,695
0 votes
1 answer
783 views

keepalived - "notifiy_master"/ "notify_backup" does not start/stop application

I want to start/stop a freeradius depending on the master (start) or the backup (stop) state of the keepalived instance. The freeradius is listening for accounting messages on the shared virtual ip. I ...
user avatar
  • 1
2 votes
0 answers
512 views

Wireguard don't work with VRRP

I try to use Wireguard on a firewall with VRRP (based on Keepalived). The firewall blocks all the communications except to the VRRP address on port 51820 and the valid established connections. ...
user avatar
  • 6,603
1 vote
0 answers
720 views

Keepalived VIP not getting updated MAC after failover

I've got keepalived set up on 2 RHEL7.8 VMs to provide HA for a shared VIP. The VIP works and properly switches to each server when expected. I experience two issues related to the MAC not getting ...
user avatar
  • 11
2 votes
1 answer
288 views

Why VRRP require /32 netmask?

In a VRRP configuration I've been using /32 subnet mask but I've never know the reason behind. Sometimes I've using the same subnet mask as the primary interface, like /24, and in some cases it works ...
user avatar
  • 674
2 votes
1 answer
172 views

Proxy-Arp setup with Keepalived

I currently am trying to create a setup with N servers where 1 server is the master for a Virtual IP, and the (N-1) servers act as backups, presumably controlled by keepalived. However, one issue I ...
user avatar
0 votes
0 answers
52 views

VRRP IP Mcast - how does intermediate switch handle

I have two routers A and B. Both have VRRP configured for Lan 0, Lan1 and Lan 2. Both routers are connected to a common router. When VRRP IP Multicast packet sent from Lan 0, Lan1 and Lan 2, what does ...
user avatar
0 votes
1 answer
126 views

Keepalived: Invalid master transition

We have a two machine keepalived setup where both machines are configured in the same way. vrrp_instance RP_VI_1 { interface eth3 state BACKUP ...
user avatar
  • 75
3 votes
1 answer
352 views

DHCP Option in HSRP /VRRP

I'm configuring HSRP having scenario described in figure below. One gateway is active for one network and standby for other network and vice versa for other gateway. DHCP is configured on both ...
user avatar
-1 votes
1 answer
858 views

Keepalived not executing scripts

I have a few state change scripts executed and they seem to be called on when I view the service status but they never run. If I execute the script manually it works fine. Any thoughts? Using Deb9.
user avatar
0 votes
2 answers
1k views

Keepalived two master have virtual IP simultaneously

It's really strange on my BACKUP device always turn to MASTER several secs. I've already search both master have virtual IP simultaneously cases,and all of there solution I've tried, but still not ...
user avatar
  • 1
0 votes
1 answer
303 views

Split brain on keepalived but both hosts get each others messages

I did a little digging and most issues I saw were resolved with a dive into firewalls and multicast fixes but from my pastes below that does not seem to be my issue. I am a little stumped on what it ...
user avatar
0 votes
1 answer
152 views

Alias address on aws ec2 between different availability zones

i have a setup: Orange - is availability zones(AZ). in each AZ there is by 2 subnets: 10.0.1.0/27 & 10.0.0.0/27 10.0.1.32/27 & 10.0.0.32/27 And i'm trying to set up VRRP (it like round ...
user avatar
2 votes
0 answers
1k views

multiple networks in keepalived configuration

I have two router(lxc containers) seated in the distribution layer of my network and I want to implement HA for them. The routers have 114 network interfaces and I want that they share a virtual ip ...
user avatar
  • 21
1 vote
1 answer
1k views

HA Squid with Keepalived

We're trying to setup two HA services: Explicit forwarding proxy using Squid (port 8080) SMTP relay to Office365 using Postfix For both setups we have 2 VM's with a default Debian 7 install, and I'...
user avatar
5 votes
2 answers
4k views

Start keepalived without IP on interface?

I want to use keepalived on an interface that will get an IP at some point but will not have one initially, can I set this up somehow in the config? If I try to start it now keepalived errors out as ...
user avatar
  • 253
1 vote
0 answers
924 views

Spurious traffic hitting Keepalived

We use Keepalived (running on RHEL 7) to manage shared IP addresses on our 3 HAProxy servers. Each server has 2 interfaces, one with a public IP and one with a private IP. We are migrating from a pair ...
user avatar
  • 1,212
0 votes
0 answers
1k views

keepalived failover downtime

I have a simple setup with keepalived configured on 2 Ubuntu 16.04 servers (VMWare VM's) I have a VIP shared between the hosts and everything is working fine. When I stop or restart one server the ...
user avatar
4 votes
1 answer
3k views

Meaning of virtual_ipaddress_excluded in keepalived configuration

I had some problems with my keepalived configuration and found the answer in this post: Keepalived for more than 20 virtual addresses But I am not sure about the difference between virtual_ipaddress ...
user avatar
0 votes
1 answer
882 views

How can a server respond with a different IP (Virtual IP) when using Keepalived?

I have been studying Keepalived for High Availability purposes. I have some fundamental questions concerning TCP/IP behavior when Keepalived is in place. With Keepalived, clients can access the ...
user avatar
0 votes
1 answer
59 views

Smooth transfer of service IP to backup system

I'm trying to research the best way to find a HA solution plus (little) load balancing for our TCP services. All solutions I found (e.g. HAProxy, LVS) use a master machine which holds the TCP service ...
user avatar
0 votes
1 answer
3k views

Keepalived VIP is active on both servers

I have configured keepalived on two RHEL 7 servers as below Primary server vrrp_instance VI_1 { state MASTER interface eth0 virtual_router_id 51 priority 100 advert_int 1 ...
user avatar
  • 3
1 vote
0 answers
7k views

Keepalived sends both unicast and multicast VRRP advertisements

I have three clusters of keepalived servers, two instances in each cluster, each cluster with a unique VIP and Router Id. Two of them are working fine using unicast VRRP advertisements, but one of ...
user avatar
1 vote
1 answer
3k views

What does mean EQUAL state of keepalived config?

I faced with new for me, unknown value of "state" variable - "EQUAL". Be more specific: vrrp_script chk_master { script "/var/<path>/scripts/cmaster.sh" timeout 25 interval 30 ...
user avatar
3 votes
1 answer
3k views

NTP high-availability behind a Virtual IP

Is it a bad practice to put a NTP server behind a Virtual IP? (VRRP) How much would it be preferred to simply have the clients talk directly to the 2 instances? Since the NTP clients keeps the ...
user avatar
  • 228
1 vote
2 answers
3k views

Can the VRRP ID of 2 different systems clash (keepalived and cisco/force10)

Since Keepalived and Cisco/Force10 both use VRRP, and use an ID Range of 0-255: 1) Would using the same number in the same vlan cause a issues. 2) Would using a different number in the same vlan ...
user avatar
  • 7,555
0 votes
1 answer
79 views

Negotitate VRRP on a private link between routers (Possible?)

I have a topology similar to this one: R1 and R2 are two physical machines acting as routers. (Running some linux distro with Keepalived) R1 and R2 are connected to one another with a private link. ...
user avatar
2 votes
1 answer
1k views

Network WAN load-balancing over Multiple Firewalls

Currently we have a Cisco ISA570 Firewall which does failover load-balancing between two ISP links. I would like to get a Sonicwall NSA6000 which should be primary and the ISA570 as a failover device....
user avatar
1 vote
1 answer
5k views

Keepalived configuration for VRRP

I am trying to understand if there is a relation between garp_master_delay and advert_int. In all the configurations I saw, advert_int was less than garp_master_delay. Is there any reason for this? ...
user avatar
  • 239
1 vote
1 answer
5k views

keepalived - random re-elections

We have set up 3 servers running keepalived . We started noticing some random re-elections occurring which we can't explain so I cam here looking for advice. Here is our configuration: MASTER: ...
user avatar
  • 1,778
1 vote
1 answer
831 views

Make keepalived send 0 priority when going to FAULT state

When stopping (service keepalived stop), keepalived does send the priority 0 adverts so the backup server takes over almost immediately. However, when it goes to fault mode (check script returns not ...
user avatar
2 votes
1 answer
3k views

Same VRRP group, multiple VLAN

Let's say a gateway has traffic between vlan 11 and 22: Gateway 1 -- FastEthernet 0/1.1 -- vlan 11 -- 192.168.11.1 Gateway 1 -- FastEthernet 0/2.2 -- vlan 22 -- 192.168.22.1 Gateway 2 -- ...
user avatar
  • 143
4 votes
1 answer
2k views

keepalived config is not working correctly with virtualbox vms

my keepalived configuration is not working correctly. I have two virtual testing machines (virtualbox) to try some things out with keepalived/vrrp. Bot can ping each other flawlessly (internal ...
user avatar
  • 77
0 votes
1 answer
4k views

Keepalived in ring architecture, or other better approach

I have three load balancer (LB1, LB2, LB3) and plan to use ring architecture for active-active setup, e.g. LB1 LB2 LB3 IP1 IP2 IP3 Idea as below: If LB1 failed, IP1 will be floated to ...
user avatar
  • 1,985
0 votes
1 answer
2k views

How to configuration keepalived on Amazon EC2?

I rad some article. Keepalived over GRE tunnel for failover on VPS environment http://blog.killtheradio.net/how-tos/keepalived-haproxy-and-failover-on-the-cloud-or-any-vps-without-multicast/ but, I ...
user avatar
  • 1
0 votes
1 answer
1k views

Can VRRP be used between 2 interfaces on the same node instead of between 2 nodes?

I have two 3750's joined together with a stackwise cable. I have a connection between one of the 3750's physical port and a gateway router. Last week one of the 3750's failed due to power issues, ...
user avatar
3 votes
3 answers
3k views

Linux Virtual IP Options

There seem to be lots of options in Linux to provide a virtual IP for failover between multiple hosts. Some that I have found are heartbeat, vrrpd, carp, and keepalived. In Linux I only have ...
user avatar
  • 81.6k
2 votes
1 answer
875 views

Multicast routing

I got two firewalls running Keepalived and working ok. I would like to pass the vrrp multicast traffic bethween a direct back to back link between those firewalls (that direct link is already used by ...
user avatar
1 vote
3 answers
1k views

vrrp routing ping, but not other traffic

I've got two VMs running BusyBox (under ESX). These machines function only as load balancers. I'm using pen to do the load balancing on each machine which is working fine. But when I fire up vrrpd ...
user avatar
  • 27.1k
0 votes
1 answer
286 views

Clustering Gateway Computer

We use linux computer as our office gateway. It has two Internet connection and one LAN connection. My problem is that whenever there is any gateway software configuration problem or hardware problem, ...
user avatar
13 votes
3 answers
19k views

Prevent VRRP Master from becoming Master once it has failed

I have two machines (A and B, A is Master) running VRPP (from keepalived) for a Virtual IP. How can I prevent A from becoming Master again if it has failed and come back up (for whatever reason)? I'...
user avatar
  • 273