Re: IPv6 and CARP crashes boxes



Meant to reply to this at the time, but have been away...

Has anyone else run into problems when using IPv6 + CARP ?

I ran into some - aliases on a CARP integface did not seem
to work proprly - but if you workaround that then it appears
to work fine. We are using it in production with no problems.

I plan to hold a presentation at work on IP6 and why we should start
using it, however I cannot promote the use of IP6 without redundancy
between firewalls like we currently do with CARP + pfsync.

The redundancy with pfsync works properly - an ssh session
is maintained through the firewalls when they failover. I
configure my machines to use a paiur of carp interfaces on each
physical port, so I am not mixing IPv4 and IPv6 on the same
interface. I onyl did that as an experiment when I was trying
to work around the aliases problem, but have kept it for "tidnyess"

Basically our experience of the setup has been very positive - our
main connectivity issues have come from the HE/Cogent peering squabble
rather than any FreeBSD/Carp/PF failing.

cheers,

-pete.
_______________________________________________
freebsd-stable@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscribe@xxxxxxxxxxx"



Relevant Pages

  • Re: Problems with vlan + carp + alias
    ... I think you should setup ALL the carp address as alias/32, ... through your carp interface ... ... Since the IP's are on the same subnet, you should try using a netmask of ... changing the mask to 255.255.255.255 of the aliases doesn't ...
    (freebsd-net)
  • Re: IPv6 and CARP crashes boxes
    ... I ran into some - aliases on a CARP integface did not seem ... between firewalls like we currently do with CARP + pfsync. ... configure my machines to use a paiur of carp interfaces on each ...
    (freebsd-stable)
  • Re: CARP and IP aliases
    ... I'm hoping to get confirmation that CARP will work ... with IP aliases. ... to the internal interface and many IP addresses bound to the WAN interface. ... setting up multiple CARPs allows you to 'share' multiple IP addresses. ...
    (comp.unix.bsd.openbsd.misc)
  • Re: CARP interfaces and mastership issue
    ... carp interface becomes MASTER for a split second after being ... We've been experiencing this double mastership problem with CARP interfaces. ... implementation which causes CARP interfaces to skip the INIT state ...
    (freebsd-stable)
  • trouble building FreeBSD 8.1 amd64 kernel with pfsync support
    ... CARP and pfsync for redundancy. ... Since I'm new to FreeBSD the config is ... The Junior Programmer sought to rephrase the ...
    (freebsd-questions)