2013/12/5 Anders Berggren
>
> Interesting. I've got sasyncd to work pretty well by introducing a rather
> long sleep before restoring the carp demote, with my main problem being the
> fallback/restore to the designated master after a short period of the
> backup being active (the failover from ma
>> Searching in google and reading some docs, I have several doubts
>> about which one to choose. If I am not wrong, iked doesn't supports
>> sasyncd, is it correct??
>
> I am *much* happier with my use of isakmpd since I got rid of sasyncd
> and just rely on dead peer detection (DPD), I use ifsta
On Wed 04 Dec 2013 12:40:09 GMT, Stuart Henderson wrote:
On 2013/12/04 10:19, Andy wrote:
Yea I had the same problem with sasynd but I found a simple solution that
allows for faster failover than DPD.
The issue I found was that when isakmpd starts on the carp 'backup', the -S
stops it from chat
On 2013/12/04 10:19, Andy wrote:
> Yea I had the same problem with sasynd but I found a simple solution that
> allows for faster failover than DPD.
>
> The issue I found was that when isakmpd starts on the carp 'backup', the -S
> stops it from chatting which is great, but, I also found it also see
On Wed 04 Dec 2013 00:18:40 GMT, Stuart Henderson wrote:
On 2013-12-02, C. L. Martinez wrote:
Hi all,
I need to deploy IPSec tunnels (lan-to-lan and roadwarriors clients
like linux and windows) under two openbsd carp firewalls.
..
What option can be best to deploy in these firewalls
On 2013-12-02, C. L. Martinez wrote:
> Hi all,
>
> I need to deploy IPSec tunnels (lan-to-lan and roadwarriors clients
> like linux and windows) under two openbsd carp firewalls.
>
..
>
> What option can be best to deploy in these firewalls: ipsec
> (ipsec.conf and
On Mon, Dec 2, 2013 at 8:13 AM, C. L. Martinez wrote:
> Hi all,
>
> I need to deploy IPSec tunnels (lan-to-lan and roadwarriors clients
> like linux and windows) under two openbsd carp firewalls.
>
> Searching in google and reading some docs, I have several doubts
> abou
Hi all,
I need to deploy IPSec tunnels (lan-to-lan and roadwarriors clients
like linux and windows) under two openbsd carp firewalls.
Searching in google and reading some docs, I have several doubts
about which one to choose. If I am not wrong, iked doesn't supports
sasyncd, is it co
Hi everyone,
Please disregard the below, I seem to have found the reason (which is
that with esxi, you have to give a VM permission to enter promisc mode
(which it would have to to get the packets to the virtual MAC address
presuambly) so the card wasn't in promisc mode even though openbsd
th
Hi all,
I have an esxi server set up with 2 separate OpenBSD installations
(4.4-stable generic) and am attempting to correctly configure carp so
that I know it works before implementing this in proper hardware. My aim
is to get them to 'share' 192.168.176.154.
I think I have configured it co
i don't do pf/carp on them, but ibm x3550's are awesome general
purpose servers and I do not see why they would not be excellent pf
boxes.
On Dec 7, 2007 2:13 PM, Bob Beck <[EMAIL PROTECTED]> wrote:
> * Matthew Dempsky <[EMAIL PROTECTED]> [2007-12-06 15:54]:
>
> > Does anyone have recommendations
On 12/7/07, Bob Beck <[EMAIL PROTECTED]> wrote:
> I run an awful lot of simple pairs of Dell Rackmounted servers. (as
> well as hp, ibm. etc.) I've done this with dell 950's, 1650, 1750,
> 1850, and 1435's - lately I buy 1435's...
Awesome, we actually have two spare 1435s that we decided
* Matthew Dempsky <[EMAIL PROTECTED]> [2007-12-06 15:54]:
> Does anyone have recommendations on server hardware for setting up a
> redundant OpenBSD firewall? Right now our network handles several
> million HTTP requests per day, and we expect that to continue growing.
> I expect a simple pair of
Does anyone have recommendations on server hardware for setting up a
redundant OpenBSD firewall? Right now our network handles several
million HTTP requests per day, and we expect that to continue growing.
I expect a simple pair of Dell rackmounted servers should handle this
easily, but I thought
Just to follow-up:
I have written a plugin that uses the somewhat complete PHP Net-SNMP
bindings (no getsnmptable() ?!) and the new PF-MIB::CARP Agent
Extensions to Net-SNMP snmpd(8).
I'll post it on NagiosExchange for review if/when I can deploy a
production 4.1-stable system.
~BAS
On Fri, 200
--- Quoting Christopher Snell on 2006/12/18 at 22:38 -0700:
> On 12/15/06, Brian A. Seklecki <[EMAIL PROTECTED]> wrote:
> >Thoughts? Strategies? Ideas?
> >---
> >
> >Ask the machine directly? Ask an adjacent machine?
>
> Joel Knight just released an updated OpenBSD SNMP MIB that supports
> readin
On 12/15/06, Brian A. Seklecki <[EMAIL PROTECTED]> wrote:
Thoughts? Strategies? Ideas?
---
Ask the machine directly? Ask an adjacent machine?
Joel Knight just released an updated OpenBSD SNMP MIB that supports
reading data from the sensors framework. Perhaps he could be
persuaded to add suppo
* Brian A. Seklecki <[EMAIL PROTECTED]> [2006-12-16 01:20]:
> - C utility to ask /dev/pf pf(4)
definately the best option.
except that there is no carp shitz to query via /dev/pf.
c'mon, it's and INTERFACE, and doesn't have ANYTHING to do with pf
whatsoever.
> Preempt: Unlike "HSRP Groups" wher
Thoughts? Strategies? Ideas?
---
Ask the machine directly? Ask an adjacent machine?
Adjacent machine strat:
If the monitoring machine is directly connected to the same ethernet
segment, one could use pcap(3) to examine multicast packets. There are
no utils I know of that do this, so a few lines
> If you're having problems opening the PDF version, please try another
> PDF viewer. It was exported using the Export to PDF feature in OOo
> Impress. It opens fine on my Mac, haven't tried anything else.
Hmmm, yeah, I was wondering about that. Both Firefox and IE were
giving an error about th
On Fri, Aug 05, 2005 at 01:31:10PM -0400, Michael C. Ibarra wrote:
> It didn't open in within firefox but I was able to save the page and
> open it with my pdf viewer.
>
Hmmmworked like a champ here (using 3.6-STABLE, firefox and xpdf
from ports). You need to tools-options-downloads, and
It didn't open in within firefox but I was able to save the page and
open it with my pdf viewer.
-mike
Quoting Jason Dixon <[EMAIL PROTECTED]>:
On Aug 5, 2005, at 6:35 AM, Jason Dixon wrote:
Here are the slides that I presented at this week's OSCON in
Portland, OR. They are available in p
On Aug 5, 2005, at 6:35 AM, Jason Dixon wrote:
Here are the slides that I presented at this week's OSCON in
Portland, OR. They are available in pdf and sxi (OOo Impress)
formats.
http://www.dixongroup.net/OSCON/
If you're having problems opening the PDF version, please try another
PDF
On Fri, 5 Aug 2005 05:35:39 -0700, Jason Dixon <[EMAIL PROTECTED]>
wrote:
>Here are the slides that I presented at this week's OSCON in
>Portland, OR. They are available in pdf and sxi (OOo Impress) formats.
>
>http://www.dixongroup.net/OSCON/
>
>--
>Jason Dixon
Slide #6: "Chicks dig redundanc
Here are the slides that I presented at this week's OSCON in
Portland, OR. They are available in pdf and sxi (OOo Impress) formats.
http://www.dixongroup.net/OSCON/
--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net
25 matches
Mail list logo