Re: ipsec or iked to deploy under openbsd carp fws

2013-12-05 Thread Janne Johansson
2013/12/5 Anders Berggren > > Interesting. I've got sasyncd to work pretty well by introducing a rather > long sleep before restoring the carp demote, with my main problem being the > fallback/restore to the designated master after a short period of the > backup being active (the failover from ma

Re: ipsec or iked to deploy under openbsd carp fws

2013-12-05 Thread Anders Berggren
>> Searching in google and reading some docs, I have several doubts >> about which one to choose. If I am not wrong, iked doesn't supports >> sasyncd, is it correct?? > > I am *much* happier with my use of isakmpd since I got rid of sasyncd > and just rely on dead peer detection (DPD), I use ifsta

Re: ipsec or iked to deploy under openbsd carp fws

2013-12-04 Thread Andy
On Wed 04 Dec 2013 12:40:09 GMT, Stuart Henderson wrote: On 2013/12/04 10:19, Andy wrote: Yea I had the same problem with sasynd but I found a simple solution that allows for faster failover than DPD. The issue I found was that when isakmpd starts on the carp 'backup', the -S stops it from chat

Re: ipsec or iked to deploy under openbsd carp fws

2013-12-04 Thread Stuart Henderson
On 2013/12/04 10:19, Andy wrote: > Yea I had the same problem with sasynd but I found a simple solution that > allows for faster failover than DPD. > > The issue I found was that when isakmpd starts on the carp 'backup', the -S > stops it from chatting which is great, but, I also found it also see

Re: ipsec or iked to deploy under openbsd carp fws

2013-12-04 Thread Andy
On Wed 04 Dec 2013 00:18:40 GMT, Stuart Henderson wrote: On 2013-12-02, C. L. Martinez wrote: Hi all, I need to deploy IPSec tunnels (lan-to-lan and roadwarriors clients like linux and windows) under two openbsd carp firewalls. .. What option can be best to deploy in these firewalls

Re: ipsec or iked to deploy under openbsd carp fws

2013-12-03 Thread Stuart Henderson
On 2013-12-02, C. L. Martinez wrote: > Hi all, > > I need to deploy IPSec tunnels (lan-to-lan and roadwarriors clients > like linux and windows) under two openbsd carp firewalls. > .. > > What option can be best to deploy in these firewalls: ipsec > (ipsec.conf and

Re: ipsec or iked to deploy under openbsd carp fws

2013-12-02 Thread C. L. Martinez
On Mon, Dec 2, 2013 at 8:13 AM, C. L. Martinez wrote: > Hi all, > > I need to deploy IPSec tunnels (lan-to-lan and roadwarriors clients > like linux and windows) under two openbsd carp firewalls. > > Searching in google and reading some docs, I have several doubts > abou

ipsec or iked to deploy under openbsd carp fws

2013-12-02 Thread C. L. Martinez
Hi all, I need to deploy IPSec tunnels (lan-to-lan and roadwarriors clients like linux and windows) under two openbsd carp firewalls. Searching in google and reading some docs, I have several doubts about which one to choose. If I am not wrong, iked doesn't supports sasyncd, is it co

Re: OpenBSD CARP

2008-12-22 Thread Stuart Morgan
Hi everyone, Please disregard the below, I seem to have found the reason (which is that with esxi, you have to give a VM permission to enter promisc mode (which it would have to to get the packets to the virtual MAC address presuambly) so the card wasn't in promisc mode even though openbsd th

OpenBSD CARP

2008-12-22 Thread Stuart Morgan
Hi all, I have an esxi server set up with 2 separate OpenBSD installations (4.4-stable generic) and am attempting to correctly configure carp so that I know it works before implementing this in proper hardware. My aim is to get them to 'share' 192.168.176.154. I think I have configured it co

Re: Hardware recommendations for OpenBSD carp router/firewall machines

2007-12-07 Thread Joshua Smith
i don't do pf/carp on them, but ibm x3550's are awesome general purpose servers and I do not see why they would not be excellent pf boxes. On Dec 7, 2007 2:13 PM, Bob Beck <[EMAIL PROTECTED]> wrote: > * Matthew Dempsky <[EMAIL PROTECTED]> [2007-12-06 15:54]: > > > Does anyone have recommendations

Re: Hardware recommendations for OpenBSD carp router/firewall machines

2007-12-07 Thread Matthew Dempsky
On 12/7/07, Bob Beck <[EMAIL PROTECTED]> wrote: > I run an awful lot of simple pairs of Dell Rackmounted servers. (as > well as hp, ibm. etc.) I've done this with dell 950's, 1650, 1750, > 1850, and 1435's - lately I buy 1435's... Awesome, we actually have two spare 1435s that we decided

Re: Hardware recommendations for OpenBSD carp router/firewall machines

2007-12-07 Thread Bob Beck
* Matthew Dempsky <[EMAIL PROTECTED]> [2007-12-06 15:54]: > Does anyone have recommendations on server hardware for setting up a > redundant OpenBSD firewall? Right now our network handles several > million HTTP requests per day, and we expect that to continue growing. > I expect a simple pair of

Hardware recommendations for OpenBSD carp router/firewall machines

2007-12-06 Thread Matthew Dempsky
Does anyone have recommendations on server hardware for setting up a redundant OpenBSD firewall? Right now our network handles several million HTTP requests per day, and we expect that to continue growing. I expect a simple pair of Dell rackmounted servers should handle this easily, but I thought

Re: [Nagiosplug-devel] nagios check_carp for OpenBSD carp(4)

2007-06-20 Thread Brian A. Seklecki
Just to follow-up: I have written a plugin that uses the somewhat complete PHP Net-SNMP bindings (no getsnmptable() ?!) and the new PF-MIB::CARP Agent Extensions to Net-SNMP snmpd(8). I'll post it on NagiosExchange for review if/when I can deploy a production 4.1-stable system. ~BAS On Fri, 200

Re: nagios check_carp for OpenBSD carp(4)

2006-12-19 Thread Joel Knight
--- Quoting Christopher Snell on 2006/12/18 at 22:38 -0700: > On 12/15/06, Brian A. Seklecki <[EMAIL PROTECTED]> wrote: > >Thoughts? Strategies? Ideas? > >--- > > > >Ask the machine directly? Ask an adjacent machine? > > Joel Knight just released an updated OpenBSD SNMP MIB that supports > readin

Re: nagios check_carp for OpenBSD carp(4)

2006-12-18 Thread Christopher Snell
On 12/15/06, Brian A. Seklecki <[EMAIL PROTECTED]> wrote: Thoughts? Strategies? Ideas? --- Ask the machine directly? Ask an adjacent machine? Joel Knight just released an updated OpenBSD SNMP MIB that supports reading data from the sensors framework. Perhaps he could be persuaded to add suppo

Re: nagios check_carp for OpenBSD carp(4)

2006-12-16 Thread Henning Brauer
* Brian A. Seklecki <[EMAIL PROTECTED]> [2006-12-16 01:20]: > - C utility to ask /dev/pf pf(4) definately the best option. except that there is no carp shitz to query via /dev/pf. c'mon, it's and INTERFACE, and doesn't have ANYTHING to do with pf whatsoever. > Preempt: Unlike "HSRP Groups" wher

nagios check_carp for OpenBSD carp(4)

2006-12-15 Thread Brian A. Seklecki
Thoughts? Strategies? Ideas? --- Ask the machine directly? Ask an adjacent machine? Adjacent machine strat: If the monitoring machine is directly connected to the same ethernet segment, one could use pcap(3) to examine multicast packets. There are no utils I know of that do this, so a few lines

Re: OSCON - OpenBSD/CARP slides

2005-08-05 Thread C. Bensend
> If you're having problems opening the PDF version, please try another > PDF viewer. It was exported using the Export to PDF feature in OOo > Impress. It opens fine on my Mac, haven't tried anything else. Hmmm, yeah, I was wondering about that. Both Firefox and IE were giving an error about th

Re: OSCON - OpenBSD/CARP slides

2005-08-05 Thread Andrew Swisher
On Fri, Aug 05, 2005 at 01:31:10PM -0400, Michael C. Ibarra wrote: > It didn't open in within firefox but I was able to save the page and > open it with my pdf viewer. > Hmmmworked like a champ here (using 3.6-STABLE, firefox and xpdf from ports). You need to tools-options-downloads, and

Re: OSCON - OpenBSD/CARP slides

2005-08-05 Thread Michael C. Ibarra
It didn't open in within firefox but I was able to save the page and open it with my pdf viewer. -mike Quoting Jason Dixon <[EMAIL PROTECTED]>: On Aug 5, 2005, at 6:35 AM, Jason Dixon wrote: Here are the slides that I presented at this week's OSCON in Portland, OR. They are available in p

Re: OSCON - OpenBSD/CARP slides

2005-08-05 Thread Jason Dixon
On Aug 5, 2005, at 6:35 AM, Jason Dixon wrote: Here are the slides that I presented at this week's OSCON in Portland, OR. They are available in pdf and sxi (OOo Impress) formats. http://www.dixongroup.net/OSCON/ If you're having problems opening the PDF version, please try another PDF

Re: OSCON - OpenBSD/CARP slides

2005-08-05 Thread J.C. Roberts
On Fri, 5 Aug 2005 05:35:39 -0700, Jason Dixon <[EMAIL PROTECTED]> wrote: >Here are the slides that I presented at this week's OSCON in >Portland, OR. They are available in pdf and sxi (OOo Impress) formats. > >http://www.dixongroup.net/OSCON/ > >-- >Jason Dixon Slide #6: "Chicks dig redundanc

OSCON - OpenBSD/CARP slides

2005-08-05 Thread Jason Dixon
Here are the slides that I presented at this week's OSCON in Portland, OR. They are available in pdf and sxi (OOo Impress) formats. http://www.dixongroup.net/OSCON/ -- Jason Dixon DixonGroup Consulting http://www.dixongroup.net