carp/vrrp/ucarp advice



Hi guys

I was wondering if I could get some advice from those of you who have
successfully implemented ip address failover systems such as carp and
freevrrpd.

I am trying to set up a high availability web loadbalancer using a pair of
freebsd 6.2 boxes. I have tried a number of ways to perform failover but
always seem to be hitting a problem.

UCARP
Pro's:This would be my ideal solution as the startup/shutdown scripts
enable me to stop and start my applications and add aliases to adaptors
easily.
Cons: When the backup box is rebooted it always seems to come up
advertising itself as the master, then after a few seconds reverts to
backup, although I was under the impression it was supposed to wait and
listen for advertisements(it doesnt seem to)to see if a master exists. Its
initial gratuitous arp as a master is sufficient to poison any traffic
from the local router to the shared ip address. Only solution was to use
arp-sk to send gratuitous arps every few secs, however, arp-sk was a bit
flakey and it was a bodge.

CARP
Pro's: stable and built into the kernel. Could enable acive/active arp
load sharing at a later point.
Cons: There is a Freebsd bug (I've seen it discussed on the lists) where
the creation and destroyal of a carp interface causes a kernel panic.
Also, there is no support for start/stop scripts.

Freevrrpd
Pros: Mac address changing removes some of the arp timeout
issues/gratuitus arp problems and it supports start/stop scripts
Cons: I'm finding that upon rebooting the backup unit it correctly starts
as a backup, then three seconds later syslogs that it is the master and
changes its mac address accordingly. although a sniff of the network
traffic indicates it is sending the right advertisements, it never goes
into backup mode again and keeps the virtual mac address.

So, what am I doing wrong? are there more suitable options? the
loadbalancers are all single homed and I have tried a mixture of xl, bge
and fxp cards.

Also, any links to a perl based gratuitous arp utils would be great

Any help/suggestions much appreciated.

Ross

PS - I mailed this to freebsd-cluster earlier but it didnt seem to make it
onto the list - apologies if this ends up as a cross post.

_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"



Relevant Pages

  • Re: Vrrp/CARP/ucarp Problems
    ... Using CARP is not appropriate as is noted in the (FreeBSD) man page. ... When the backup box is rebooted it always comes up advertising ... gratuitous arp as a master is sufficient to poison any traffic from the ...
    (freebsd-net)
  • Re: Vrrp/CARP/ucarp Problems
    ... When the backup box is rebooted it always comes up advertising ... gratuitous arp as a master is sufficient to poison any traffic from the ... the creation and destroyal of a carp interface causes a kernel panic. ... I do not think start/stop scripts are problem as average sysadmin can solve this for itself:) ...
    (freebsd-net)
  • Vrrp/CARP/ucarp Problems
    ... successfully implemented ip address failover systems such as carp and ... When the backup box is rebooted it always comes up advertising ... gratuitous arp as a master is sufficient to poison any traffic from the ... the creation and destroyal of a carp interface causes a kernel panic. ...
    (freebsd-net)
  • Re: CARP-related error on 5.4RC3
    ... Sorry to follow up on my own post, but more CARP weirdness on 5.4RC3. ... When I reboot the master, the backup quickly takes over -- just as you ... > above the carp interfaces. ...
    (freebsd-stable)
  • Re: CARP not balancing automatically
    ... I need one carp interface to be master and one backup on box A, and the opposite master/backup on box B. Or am I totally misunderstanding with the preemtp sysctl is for? ... other host: ...
    (freebsd-stable)