CARP and routing
Hi, I discover that CARP and routing don't always mix well: Internet --- host1 host2 If host1 and host2 have a CARP interface with the same IP, then packets destined for that IP don't ever reach host2, even if the interface on host1 is in BACKUP state. Kind regards, --Toni++
Re: CARP and routing
On 25/11/10 12:22, Toni Mueller wrote: Hi, I discover that CARP and routing don't always mix well: Internet --- host1 host2 If host1 and host2 have a CARP interface with the same IP, then packets destined for that IP don't ever reach host2, even if the interface on host1 is in BACKUP state. Kind regards, --Toni++ Wait, do you mean; Host1 Internet --- | Host 2
Re: CARP and routing
On Thu, 25.11.2010 at 13:15:06 +, Michal mic...@sharescope.co.uk wrote: On 25/11/10 12:22, Toni Mueller wrote: I discover that CARP and routing don't always mix well: Internet --- host1 host2 Wait, do you mean; Host1 Internet --- | Host 2 No, I mean Internet --- host1 --- host2. I'm just digging the code to find the place where the kernel decides that a given IP is his, and would appreciate pointers. Kind regards, --Toni++
Re: CARP and routing
On Thu, 25 Nov 2010 13:22:13 +0100 Toni Mueller openbsd-m...@oeko.net wrote: Internet --- host1 host2 Because your setup should rather look like this? Internet --- switch --- host1 --- switch --- LAN + --- host2 + regards, Robert
Re: CARP and routing
On 25/11/10 13:20, Robert Hoffmann wrote: On Thu, 25 Nov 2010 13:22:13 +0100 Toni Muelleropenbsd-m...@oeko.net wrote: Internet --- host1 host2 Because your setup should rather look like this? Internet --- switch --- host1 --- switch --- LAN + --- host2 + regards, Robert This is what I was trying to get at...the way you draw your diagram, I can't understand what your trying to do with carp if you have internet -- host1 -- host2
Re: CARP and routing
On Thu, 25.11.2010 at 14:29:39 +, Michal mic...@sharescope.co.uk wrote: Because your setup should rather look like this? Internet --- switch --- host1 --- switch --- LAN + --- host2 + This is what I was trying to get at...the way you draw your diagram, I can't understand what your trying to do with carp if you have internet -- host1 -- host2 I have a low-resources application running on host2 which I'd like to be available at all times, but would prefer to not have it on host1 in general. I also have Internet --- switch --- host1 --- switch --- LAN + --- host3 + but this is not very relevant in this context. Ok, a better picture would be Internet --- switch --- host1 --- switch --- host2 + --- host3 + Kind regards, --Toni++
Re: Carp source routing ?
Hello, - Don't configure an address on the carp device's parent interface (only applies if the carp devices is then the route to the other endpoint) This one worked the way I wanted ! I finally have a working carp to carp High Availabity Synchronized ipsec tunnel :) And it seems to work very well !!! Very nice work with carp! Congrats :) Thanks for the help, Pedro
Carp source routing ?
Hello, Is it possible to send packets with the carp address as the source address ? If yes, how ? Thanks, Pedro
Re: Carp source routing ?
On Mon, Nov 27, 2006 at 12:16:13PM -, Pedro Hugo wrote: Is it possible to send packets with the carp address as the source address ? You have a few options: - Have the process bind to the carp address only (most daemons allow this to be configured as do some userland tools such as nc and ping) - Use pf to nat traffic to the carp address - Don't configure an address on the carp device's parent interface (only applies if the carp devices is then the route to the other endpoint)