Questions tagged [vrrp]
VRRP stands for the Virtual Router Redundancy Protocol and uses a virtual IP address to provide high availability for a service. It is often used to provide a virtual IP address for load balancers or default gateways.
47
questions
0
votes
0
answers
99
views
keepalived - received advertisement timeout
I'm trying to setup keepalived between two servers, this servers are in diferent DMZ's.
I already open all necessary ports and the servers are communicating correctly beetween each other, but when i ...
1
vote
0
answers
190
views
Keepalived operation when interface has not yet acquired an IP address
I have an application that requires 2 servers to coordinate their service using keepalived running VRRP on a particular network where each has an interface. I want the VRRP traffic to be unicast and ...
- 11
1
vote
1
answer
3k
views
Configuring HAProxy with Virtual IPs
I would like to create a redundant HAProxy configuration with:
Keepalived - for determining which HA Proxy is active
HAProxy - for doing load balancing and failover
I will be using a cloud service ...
- 11
0
votes
0
answers
84
views
VRRP sync group not working?
I have two identical routers. Both are running VyOS.
They are both configured like this:
router1:
high-availability {
vrrp {
group wan {
address 94.<redacted>.1/29 {
...
- 11
0
votes
0
answers
94
views
The packet goes through the other router
I want to connect two hosts in parallel with two different models of virtual routers.
These are made redundant by VRRP.
Originally, packets are sent through only one of the routers.
However, when the ...
- 1
0
votes
1
answer
2k
views
Keepalived going split brain when Firewalld is running
I'm using keepalived to provide availability between two Alma 8 Nginx servers (hosted on VMWare if that's of any relevance). When firewalld is enabled, despite a rich rule being set for VRRP, when I ...
- 53
1
vote
0
answers
584
views
How to shutdown keepalived without releasing the VIP
Usually it is a good thing that when keepalived shuts down, it releases the virtual IP address (VIP) via VRRP and removes the address from the local interface so that other instances can take it over.
...
- 1,745
0
votes
1
answer
2k
views
keepalived - "notifiy_master"/ "notify_backup" does not start/stop application
I want to start/stop a freeradius depending on the master (start) or the backup (stop) state of the keepalived instance. The freeradius is listening for accounting messages on the shared virtual ip.
I ...
- 1
2
votes
0
answers
888
views
Wireguard don't work with VRRP
I try to use Wireguard on a firewall with VRRP (based on Keepalived). The firewall blocks all the communications except to the VRRP address on port 51820 and the valid established connections.
...
- 6,713
1
vote
0
answers
1k
views
Keepalived VIP not getting updated MAC after failover
I've got keepalived set up on 2 RHEL7.8 VMs to provide HA for a shared VIP. The VIP works and properly switches to each server when expected. I experience two issues related to the MAC not getting ...
- 11
2
votes
1
answer
510
views
Why VRRP require /32 netmask?
In a VRRP configuration I've been using /32 subnet mask but I've never know the reason behind.
Sometimes I've using the same subnet mask as the primary interface, like /24, and in some cases it works ...
- 744
2
votes
1
answer
236
views
Proxy-Arp setup with Keepalived
I currently am trying to create a setup with N servers where 1 server is the master for a Virtual IP, and the (N-1) servers act as backups, presumably controlled by keepalived. However, one issue I ...
- 121
0
votes
0
answers
102
views
VRRP IP Mcast - how does intermediate switch handle
I have two routers A and B. Both have VRRP configured for Lan 0, Lan1 and Lan 2. Both routers are connected to a common router. When VRRP IP Multicast packet sent from Lan 0, Lan1 and Lan 2, what does ...
0
votes
1
answer
222
views
Keepalived: Invalid master transition
We have a two machine keepalived setup where both machines are configured in the same way.
vrrp_instance RP_VI_1 {
interface eth3
state BACKUP
...
- 75
3
votes
1
answer
675
views
DHCP Option in HSRP /VRRP
I'm configuring HSRP having scenario described in figure below. One gateway is active for one network and standby for other network and vice versa for other gateway.
DHCP is configured on both ...
-1
votes
1
answer
1k
views
Keepalived not executing scripts
I have a few state change scripts executed and they seem to be called on when I view the service status but they never run. If I execute the script manually it works fine. Any thoughts? Using Deb9.
- 95
0
votes
2
answers
2k
views
Keepalived two master have virtual IP simultaneously
It's really strange on my BACKUP device always turn to MASTER several secs.
I've already search both master have virtual IP simultaneously cases,and all of there solution I've tried, but still not ...
- 1
0
votes
1
answer
388
views
Split brain on keepalived but both hosts get each others messages
I did a little digging and most issues I saw were resolved with a dive into firewalls and multicast fixes but from my pastes below that does not seem to be my issue. I am a little stumped on what it ...
- 95
0
votes
1
answer
216
views
Alias address on aws ec2 between different availability zones
i have a setup:
Orange - is availability zones(AZ).
in each AZ there is by 2 subnets:
10.0.1.0/27 & 10.0.0.0/27
10.0.1.32/27 & 10.0.0.32/27
And i'm trying to set up VRRP (it like round ...
- 273
2
votes
0
answers
2k
views
multiple networks in keepalived configuration
I have two router(lxc containers) seated in the distribution layer of my network and I want to implement HA for them. The routers have 114 network interfaces and I want that they share a virtual ip ...
- 21
1
vote
1
answer
2k
views
HA Squid with Keepalived
We're trying to setup two HA services:
Explicit forwarding proxy using Squid (port 8080)
SMTP relay to Office365 using Postfix
For both setups we have 2 VM's with a default Debian 7 install, and I'...
- 11
5
votes
2
answers
4k
views
Start keepalived without IP on interface?
I want to use keepalived on an interface that will get an IP at some point but will not have one initially, can I set this up somehow in the config? If I try to start it now keepalived errors out as ...
- 253
1
vote
0
answers
1k
views
Spurious traffic hitting Keepalived
We use Keepalived (running on RHEL 7) to manage shared IP addresses on our 3 HAProxy servers. Each server has 2 interfaces, one with a public IP and one with a private IP. We are migrating from a pair ...
- 1,213
0
votes
0
answers
2k
views
keepalived failover downtime
I have a simple setup with keepalived configured on 2 Ubuntu 16.04 servers (VMWare VM's)
I have a VIP shared between the hosts and everything is working fine. When I stop or restart one server the ...
- 11
4
votes
1
answer
3k
views
Meaning of virtual_ipaddress_excluded in keepalived configuration
I had some problems with my keepalived configuration and found the answer in this post: Keepalived for more than 20 virtual addresses
But I am not sure about the difference between virtual_ipaddress ...
- 41
0
votes
1
answer
1k
views
How can a server respond with a different IP (Virtual IP) when using Keepalived?
I have been studying Keepalived for High Availability purposes.
I have some fundamental questions concerning TCP/IP behavior when Keepalived is in place.
With Keepalived, clients can access the ...
0
votes
1
answer
60
views
Smooth transfer of service IP to backup system
I'm trying to research the best way to find a HA solution plus (little) load balancing for our TCP services.
All solutions I found (e.g. HAProxy, LVS) use a master machine which holds the TCP service ...
0
votes
1
answer
4k
views
Keepalived VIP is active on both servers
I have configured keepalived on two RHEL 7 servers as below
Primary server
vrrp_instance VI_1 {
state MASTER
interface eth0
virtual_router_id 51
priority 100
advert_int 1
...
- 3
1
vote
0
answers
8k
views
Keepalived sends both unicast and multicast VRRP advertisements
I have three clusters of keepalived servers, two instances in each cluster, each cluster with a unique VIP and Router Id. Two of them are working fine using unicast VRRP advertisements, but one of ...
1
vote
2
answers
3k
views
What does mean EQUAL state of keepalived config?
I faced with new for me, unknown value of "state" variable - "EQUAL". Be more specific:
vrrp_script chk_master {
script "/var/<path>/scripts/cmaster.sh"
timeout 25
interval 30
...
user391348
3
votes
1
answer
3k
views
NTP high-availability behind a Virtual IP
Is it a bad practice to put a NTP server behind a Virtual IP? (VRRP)
How much would it be preferred to simply have the clients talk directly to the 2 instances?
Since the NTP clients keeps the ...
- 228
1
vote
2
answers
3k
views
Can the VRRP ID of 2 different systems clash (keepalived and cisco/force10)
Since Keepalived and Cisco/Force10 both use VRRP, and use an ID Range of 0-255:
1) Would using the same number in the same vlan cause a issues.
2) Would using a different number in the same vlan ...
- 7,806
0
votes
1
answer
84
views
Negotitate VRRP on a private link between routers (Possible?)
I have a topology similar to this one:
R1 and R2 are two physical machines acting as routers. (Running some linux distro with Keepalived)
R1 and R2 are connected to one another with a private link.
...
2
votes
1
answer
1k
views
Network WAN load-balancing over Multiple Firewalls
Currently we have a Cisco ISA570 Firewall which does failover load-balancing between two ISP links.
I would like to get a Sonicwall NSA6000 which should be primary and the ISA570 as a failover device....
1
vote
1
answer
6k
views
Keepalived configuration for VRRP
I am trying to understand if there is a relation between garp_master_delay and advert_int. In all the configurations I saw, advert_int was less than garp_master_delay.
Is there any reason for this?
...
- 249
1
vote
1
answer
6k
views
keepalived - random re-elections
We have set up 3 servers running keepalived . We started noticing some random re-elections occurring which we can't explain so I cam here looking for advice.
Here is our configuration:
MASTER:
...
- 1,818
1
vote
1
answer
1k
views
Make keepalived send 0 priority when going to FAULT state
When stopping (service keepalived stop), keepalived does send the priority 0 adverts so the backup server takes over almost immediately. However, when it goes to fault mode (check script returns not ...
- 443
2
votes
1
answer
3k
views
Same VRRP group, multiple VLAN
Let's say a gateway has traffic between vlan 11 and 22:
Gateway 1 -- FastEthernet 0/1.1 -- vlan 11 -- 192.168.11.1
Gateway 1 -- FastEthernet 0/2.2 -- vlan 22 -- 192.168.22.1
Gateway 2 -- ...
- 143
5
votes
1
answer
2k
views
keepalived config is not working correctly with virtualbox vms
my keepalived configuration is not working correctly.
I have two virtual testing machines (virtualbox) to try some things out with keepalived/vrrp. Bot can ping each other flawlessly (internal ...
- 97
0
votes
1
answer
5k
views
Keepalived in ring architecture, or other better approach
I have three load balancer (LB1, LB2, LB3) and plan to use ring architecture for active-active setup, e.g.
LB1 LB2 LB3
IP1 IP2 IP3
Idea as below:
If LB1 failed, IP1 will be floated to ...
- 2,105
0
votes
1
answer
2k
views
How to configuration keepalived on Amazon EC2?
I rad some article.
Keepalived over GRE tunnel for failover on VPS environment
http://blog.killtheradio.net/how-tos/keepalived-haproxy-and-failover-on-the-cloud-or-any-vps-without-multicast/
but, I ...
- 1
0
votes
1
answer
1k
views
Can VRRP be used between 2 interfaces on the same node instead of between 2 nodes?
I have two 3750's joined together with a stackwise cable. I have a connection between one of the 3750's physical port and a gateway router. Last week one of the 3750's failed due to power issues, ...
- 131
3
votes
3
answers
3k
views
Linux Virtual IP Options
There seem to be lots of options in Linux to provide a virtual IP for failover between multiple hosts. Some that I have found are heartbeat, vrrpd, carp, and keepalived.
In Linux I only have ...
- 83.3k
2
votes
1
answer
919
views
Multicast routing
I got two firewalls running Keepalived and working ok.
I would like to pass the vrrp multicast traffic bethween a direct back to back link
between those firewalls (that direct link is already used by ...
Henry-Nicolas Tourneur
1
vote
3
answers
1k
views
vrrp routing ping, but not other traffic
I've got two VMs running BusyBox (under ESX). These machines function only as load balancers.
I'm using pen to do the load balancing on each machine which is working fine. But when I fire up vrrpd ...
- 27.1k
0
votes
1
answer
291
views
Clustering Gateway Computer
We use linux computer as our office gateway. It has two Internet connection and one LAN connection. My problem is that whenever there is any gateway software configuration problem or hardware problem, ...
user7010
14
votes
3
answers
19k
views
Prevent VRRP Master from becoming Master once it has failed
I have two machines (A and B, A is Master) running VRPP (from keepalived) for a Virtual IP.
How can I prevent A from becoming Master again if it has failed and come back up (for whatever reason)?
I'...
- 283