CARP and routing

2010-11-25 Thread Toni Mueller
Hi,

I discover that CARP and routing don't always mix well:

  Internet --- host1   host2

If host1 and host2 have a CARP interface with the same IP, then packets
destined for that IP don't ever reach host2, even if the interface on
host1 is in BACKUP state.



Kind regards,
--Toni++



Re: CARP and routing

2010-11-25 Thread Michal

On 25/11/10 12:22, Toni Mueller wrote:

Hi,

I discover that CARP and routing don't always mix well:

   Internet --- host1   host2

If host1 and host2 have a CARP interface with the same IP, then packets
destined for that IP don't ever reach host2, even if the interface on
host1 is in BACKUP state.



Kind regards,
--Toni++


Wait, do you mean;


    Host1
Internet --- |
    Host 2



Re: CARP and routing

2010-11-25 Thread Toni Mueller
On Thu, 25.11.2010 at 13:15:06 +, Michal mic...@sharescope.co.uk wrote:
 On 25/11/10 12:22, Toni Mueller wrote:
 I discover that CARP and routing don't always mix well:
 
Internet --- host1   host2
 Wait, do you mean;
 
 
 Host1
 Internet --- |
 Host 2

No, I mean Internet --- host1 --- host2.

I'm just digging the code to find the place where the kernel decides
that a given IP is his, and would appreciate pointers.


Kind regards,
--Toni++



Re: CARP and routing

2010-11-25 Thread Robert Hoffmann
On Thu, 25 Nov 2010 13:22:13 +0100
Toni Mueller openbsd-m...@oeko.net wrote:
   Internet --- host1   host2

Because your setup should rather look like this?

Internet --- switch --- host1 --- switch --- LAN
  + --- host2 +

regards,
Robert



Re: CARP and routing

2010-11-25 Thread Michal

On 25/11/10 13:20, Robert Hoffmann wrote:

On Thu, 25 Nov 2010 13:22:13 +0100
Toni Muelleropenbsd-m...@oeko.net  wrote:

   Internet --- host1   host2

Because your setup should rather look like this?

Internet --- switch --- host1 --- switch --- LAN
   + --- host2 +

regards,
Robert

This is what I was trying to get at...the way you draw your diagram, I 
can't understand what your trying to do with carp if you have


internet -- host1 -- host2



Re: CARP and routing

2010-11-25 Thread Toni Mueller
On Thu, 25.11.2010 at 14:29:39 +, Michal mic...@sharescope.co.uk wrote:
 Because your setup should rather look like this?
 
 Internet --- switch --- host1 --- switch --- LAN
+ --- host2 +
 This is what I was trying to get at...the way you draw your diagram,
 I can't understand what your trying to do with carp if you have
 
 internet -- host1 -- host2

I have a low-resources application running on host2 which I'd like to
be available at all times, but would prefer to not have it on host1 in
general.


I also have

 Internet --- switch --- host1 --- switch --- LAN
   + --- host3 +

but this is not very relevant in this context. Ok, a better picture
would be


Internet --- switch --- host1 --- switch --- host2
  + --- host3 +



Kind regards,
--Toni++



Re: Carp source routing ?

2006-11-28 Thread Pedro Hugo
Hello,

 - Don't configure an address on the carp device's parent interface (only
   applies if the carp devices is then the route to the other endpoint)

This one worked the way I wanted !
I finally have a working carp to carp High Availabity  Synchronized ipsec
tunnel :)

And it seems to work very well !!!

Very nice work with carp! Congrats :)

Thanks for the help,
Pedro



Carp source routing ?

2006-11-27 Thread Pedro Hugo
Hello,

Is it possible to send packets with the carp address as the source address ?
If yes, how ?

Thanks,
Pedro



Re: Carp source routing ?

2006-11-27 Thread Ryan McBride
On Mon, Nov 27, 2006 at 12:16:13PM -, Pedro Hugo wrote:
 Is it possible to send packets with the carp address as the source
 address ?

You have a few options:

- Have the process bind to the carp address only (most daemons allow
  this to be configured as do some userland tools such as nc and ping)

- Use pf to nat traffic to the carp address

- Don't configure an address on the carp device's parent interface (only
  applies if the carp devices is then the route to the other endpoint)