Tom, Assuming the fw cluster is properly set up, I guess because PF rule states is unsync.
As times goes by, states gets synchronized. JP Em ter., 13 de jul. de 2021 às 05:50, Tom K <g...@gnpf.net> escreveu: > Hallo, > > why demotion counter for group carp is set to 33 on boot? This is the > primary firewall and there are no adskew settings in all hostname.carpX > files or anywhere else. > Because of this the other firewall which should be normaly the standby > (adskew 100), is always MASTER (comes up with carp demote count 0). > > OpenBSD foobar 6.7 GENERIC.MP#182 amd64 > > Jul 11 20:43:19 foobar /bsd: carp: pfsync0 demoted group carp by 32 to > 160 (pfsync init) > Jul 11 20:43:19 foobar /bsd: carp: pfsync0 demoted group pfsync by 32 > to 32 (pfsync init) > Jul 11 20:43:19 foobar /bsd: carp: pfsync0 demoted group carp by 1 to > 161 (pfsync bulk start) > Jul 11 20:43:19 foobar /bsd: carp: pfsync0 demoted group pfsync by 1 to > 33 (pfsync bulk start) > Jul 11 20:43:19 foobar /bsd: carp: carp0 demoted group carp by 1 to 162 > (carpdev) > Jul 11 20:43:19 foobar /bsd: carp: carp1 demoted group carp by 1 to 163 > (carpdev) > Jul 11 20:43:19 foobar /bsd: carp: carp10 demoted group carp by 1 to > 164 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp: carp11 demoted group carp by 1 to > 165 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp: carp12 demoted group carp by 1 to > 166 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp: carp13 demoted group carp by 1 to > 167 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp: carp14 demoted group carp by 1 to > 168 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp: carp15 demoted group carp by 1 to > 169 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp: carp16 demoted group carp by 1 to > 170 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp: carp17 demoted group carp by 1 to > 171 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp: carp2 demoted group carp by 1 to 172 > (carpdev) > Jul 11 20:43:19 foobar /bsd: carp: carp3 demoted group carp by 1 to 173 > (carpdev) > Jul 11 20:43:19 foobar /bsd: carp: carp5 demoted group carp by 1 to 174 > (carpdev) > Jul 11 20:43:19 foobar /bsd: carp: carp6 demoted group carp by 1 to 175 > (carpdev) > Jul 11 20:43:19 foobar /bsd: carp: carp7 demoted group carp by 1 to 176 > (carpdev) > Jul 11 20:43:19 foobar /bsd: carp: carp8 demoted group carp by 1 to 177 > (carpdev) > Jul 11 20:43:19 foobar /bsd: carp: carp9 demoted group carp by 1 to 178 > (carpdev) > Jul 11 20:43:19 foobar /bsd: carp15: state transition: INIT -> BACKUP > Jul 11 20:43:19 foobar /bsd: carp: carp15 demoted group carp by -1 to > 177 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp0: state transition: INIT -> BACKUP > Jul 11 20:43:19 foobar /bsd: carp: carp0 demoted group carp by -1 to > 176 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp12: state transition: INIT -> BACKUP > Jul 11 20:43:19 foobar /bsd: carp: carp12 demoted group carp by -1 to > 175 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp3: state transition: INIT -> BACKUP > Jul 11 20:43:19 foobar /bsd: carp: carp3 demoted group carp by -1 to > 174 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp13: state transition: INIT -> BACKUP > Jul 11 20:43:19 foobar /bsd: carp: carp13 demoted group carp by -1 to > 173 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp2: state transition: INIT -> BACKUP > Jul 11 20:43:19 foobar /bsd: carp: carp2 demoted group carp by -1 to > 172 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp16: state transition: INIT -> BACKUP > Jul 11 20:43:19 foobar /bsd: carp: carp16 demoted group carp by -1 to > 171 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp9: state transition: INIT -> BACKUP > Jul 11 20:43:19 foobar /bsd: carp: carp9 demoted group carp by -1 to > 170 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp8: state transition: INIT -> BACKUP > Jul 11 20:43:19 foobar /bsd: carp: carp8 demoted group carp by -1 to > 169 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp14: state transition: INIT -> BACKUP > Jul 11 20:43:19 foobar /bsd: carp: carp14 demoted group carp by -1 to > 168 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp11: state transition: INIT -> BACKUP > Jul 11 20:43:19 foobar /bsd: carp: carp11 demoted group carp by -1 to > 167 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp10: state transition: INIT -> BACKUP > Jul 11 20:43:19 foobar /bsd: carp: carp10 demoted group carp by -1 to > 166 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp1: state transition: INIT -> BACKUP > Jul 11 20:43:19 foobar /bsd: carp: carp1 demoted group carp by -1 to > 165 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp7: state transition: INIT -> BACKUP > Jul 11 20:43:19 foobar /bsd: carp: carp7 demoted group carp by -1 to > 164 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp6: state transition: INIT -> BACKUP > Jul 11 20:43:19 foobar /bsd: carp: carp6 demoted group carp by -1 to > 163 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp5: state transition: INIT -> BACKUP > Jul 11 20:43:19 foobar /bsd: carp: carp5 demoted group carp by -1 to > 162 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp17: state transition: INIT -> BACKUP > Jul 11 20:43:19 foobar /bsd: carp: carp17 demoted group carp by -1 to > 161 (carpdev) > Jul 11 20:43:19 foobar /bsd: carp0: state transition: BACKUP -> MASTER > Jul 11 20:43:19 foobar /bsd: carp12: state transition: BACKUP -> MASTER > Jul 11 20:43:19 foobar /bsd: carp15: state transition: BACKUP -> MASTER > Jul 11 20:43:19 foobar /bsd: carp3: state transition: BACKUP -> MASTER > Jul 11 20:43:19 foobar /bsd: carp13: state transition: BACKUP -> MASTER > Jul 11 20:43:19 foobar /bsd: carp2: state transition: BACKUP -> MASTER > Jul 11 20:43:19 foobar /bsd: carp1: state transition: BACKUP -> MASTER > Jul 11 20:43:19 foobar /bsd: carp7: state transition: BACKUP -> MASTER > Jul 11 20:43:19 foobar /bsd: carp6: state transition: BACKUP -> MASTER > Jul 11 20:43:19 foobar /bsd: carp5: state transition: BACKUP -> MASTER > Jul 11 20:43:19 foobar /bsd: carp17: state transition: BACKUP -> MASTER > Jul 11 20:43:19 foobar /bsd: carp16: state transition: BACKUP -> MASTER > Jul 11 20:43:19 foobar /bsd: carp0: state transition: MASTER -> BACKUP > Jul 11 20:43:20 foobar /bsd: carp15: state transition: MASTER -> BACKUP > Jul 11 20:43:21 foobar /bsd: carp17: state transition: MASTER -> BACKUP > Jul 11 20:43:21 foobar /bsd: carp5: state transition: MASTER -> BACKUP > Jul 11 20:43:21 foobar /bsd: carp7: state transition: MASTER -> BACKUP > Jul 11 20:43:21 foobar /bsd: carp6: state transition: MASTER -> BACKUP > Jul 11 20:43:21 foobar /bsd: carp12: state transition: MASTER -> BACKUP > Jul 11 20:43:21 foobar /bsd: carp2: state transition: MASTER -> BACKUP > Jul 11 20:43:21 foobar /bsd: carp16: state transition: MASTER -> BACKUP > Jul 11 20:43:21 foobar /bsd: carp1: state transition: MASTER -> BACKUP > Jul 11 20:43:21 foobar /bsd: carp3: state transition: MASTER -> BACKUP > Jul 11 20:43:21 foobar /bsd: carp13: state transition: MASTER -> BACKUP > > [~] ifconfig -g carp > carp: carp demote count 33 > > > I can do "/sbin/ifconfig -g carp -carpdemote 33" in rc.local then this > system takes the MASTER rule and work together with the 2nd system as > expected. > This ar physical machines. I try to simulate this on vmware, but there > is everything fine. Both system starting with demote count 0. > > > I would appreciate any hint to understand this. > > Tom > >
