Re: CARP and pfsync weird behaviour

2008-04-14 Thread openbsd firewall
Hello, Some news about this... If I change vhid on the backup node this problem doesn't occurs since the ARP for the master node is still in cache and backup node now has a different mac address for the carp interfaces. Of course changing vhid and IP doesn't give any trouble at all. It seems the

Re: CARP and pfsync weird behaviour

2008-04-14 Thread Stuart Henderson
On 2008-04-14, openbsd firewall [EMAIL PROTECTED] wrote: Some news about this... If I change vhid on the backup node this problem doesn't occurs since the ARP for the master node is still in cache and backup node now has a different mac address for the carp interfaces. Of course changing vhid

Re: CARP and pfsync weird behaviour

2008-04-14 Thread openbsd firewall
If I configure all carp interfaces via command line (removed the hostname.if carps) after machine is rebooted this problem doesn't happen ! :O This is crazy and I'm out of ideas for now. I was playing with carpdemote and state transition from master to backup and vice-versa works fine. It's

Re: CARP and pfsync weird behaviour

2008-04-11 Thread openbsd firewall
Same results with ACPI enabled on both nodes. On 11/04/2008, Jason Dixon [EMAIL PROTECTED] wrote: I was implying that you should enable ACPI and try again. -J. On Apr 10, 2008, at 7:08 PM, openbsd firewall [EMAIL PROTECTED] wrote:

Re: CARP and pfsync weird behaviour

2008-04-11 Thread Jason Dixon
On Apr 11, 2008, at 10:25 AM, openbsd firewall wrote: Same results with ACPI enabled on both nodes. On 11/04/2008, Jason Dixon [EMAIL PROTECTED] wrote: I was implying that you should enable ACPI and try again. Let's see your dmesg with acpi enabled. --- Jason Dixon DixonGroup Consulting

Re: CARP and pfsync weird behaviour

2008-04-11 Thread openbsd firewall
Dmesg for backup node: Apr 11 10:21:34 bbq /bsd: OpenBSD 4.2 (GENERIC) #375: Tue Aug 28 10:38:44 MDT 2007 Apr 11 10:21:34 bbq /bsd: [EMAIL PROTECTED]: /usr/src/sys/arch/i386/compile/GENERIC Apr 11 10:21:34 bbq /bsd: cpu0: Dual-Core AMD Opteron(tm) Processor 1210 HE (AuthenticAMD 686-class,

CARP and pfsync weird behaviour

2008-04-10 Thread openbsd firewall
Hello, I'm testing an OpenBSD 4.2 firewall with Iperf and I'm experiencing a very strange behaviour. What happens is that when I reboot the backup node the connection rate drops while the backup node is coming back. Iperf log: [ 3] 233.0-234.0 sec 6.62 MBytes 55.5 Mbits/sec [ 3] 234.0-235.0

Re: CARP and pfsync weird behaviour

2008-04-10 Thread Calomel
John, I ran a test using iperf on an external openbsd system (client) through a carp firewall to an internal openbsd system (server). All systems are running OpenBSD v4.2 with the latest patches. external --- CARP --- internal (iperf -i 1 -t 600 -c carp0)

Re: CARP and pfsync weird behaviour

2008-04-10 Thread openbsd firewall
Hello, This got even more interesting. After reading your email I had the idea to start turning off the various carp interfaces to see what would be the effect. I have two onboard Broadcom BCM5704C and a Intel PRO/1000MT QP (82546GB) quad nic. One carp is configured for one onboard nic and two

Re: CARP and pfsync weird behaviour

2008-04-10 Thread Jason Dixon
Is ACPI enabled? -J. On Apr 10, 2008, at 6:07 PM, openbsd firewall [EMAIL PROTECTED] wrote: Hello, This got even more interesting. After reading your email I had the idea to start turning off the various carp interfaces to see what would be the effect. I have two onboard Broadcom

Re: CARP and pfsync weird behaviour

2008-04-10 Thread openbsd firewall
Hello, It's booting with default behaviour so no ACPI enabled. Here's dmesg output for the backup node (master is exactly the same hardware). Apr 10 17:40:23 bbq /bsd: OpenBSD 4.2 (GENERIC) #375: Tue Aug 28 10:38:44 MDT 2007 Apr 10 17:40:23 bbq /bsd: [EMAIL PROTECTED]:

Re: CARP and pfsync weird behaviour

2008-04-10 Thread Jason Dixon
I was implying that you should enable ACPI and try again. -J. On Apr 10, 2008, at 7:08 PM, openbsd firewall [EMAIL PROTECTED] wrote: Hello, It's booting with default behaviour so no ACPI enabled. Here's dmesg output for the backup node (master is exactly the same hardware). Apr 10