Hello,

I'm upgrading our firewalls to OpenBSD 5.3 (with erratas) from 5.1 :

As far I can see now, the firewall (without any problem) starts with a
carp demote count = "33". On 5.1 the demote count was = 0

looks like the "33" comes with a pfsync bulk start
Jul 29 13:51:01 ucop2 /bsd: carp: pfsync0 demoted group pfsync by 1 to 33 
(pfsync bulk start)

Questions
- is it the intented behavior?
- how to fix this?
- why 33 instead 42?

While I'm here, it would be nice to be abble to set the demote counter with
an absolute value, we use it to demote the master if BGP fails.


Thanks. Regards

carp log on 5.1

Jul 29 14:04:44 ucop2 /bsd: carp1: state transition: BACKUP -> INIT
Jul 29 14:04:44 ucop2 /bsd: carp16: state transition: BACKUP -> INIT
Jul 29 14:04:44 ucop2 /bsd: carp2: state transition: BACKUP -> INIT
Jul 29 14:04:44 ucop2 /bsd: carp26: state transition: BACKUP -> INIT
Jul 29 14:04:44 ucop2 /bsd: carp3: state transition: BACKUP -> INIT
Jul 29 14:04:44 ucop2 /bsd: carp4: state transition: BACKUP -> INIT
Jul 29 14:04:44 ucop2 /bsd: carp5: state transition: BACKUP -> INIT
Jul 29 14:21:49 ucop2 /bsd: carp1: state transition: INIT -> BACKUP
Jul 29 14:21:49 ucop2 /bsd: carp16: state transition: INIT -> BACKUP
Jul 29 14:21:49 ucop2 /bsd: carp2: state transition: INIT -> BACKUP
Jul 29 14:21:49 ucop2 /bsd: carp26: state transition: INIT -> BACKUP
Jul 29 14:21:49 ucop2 /bsd: carp26: state transition: BACKUP -> INIT
Jul 29 14:21:49 ucop2 /bsd: carp26: state transition: INIT -> BACKUP
Jul 29 14:21:49 ucop2 /bsd: carp: carp3 demoted group carp by 1 to 129 (carpdev)
Jul 29 14:21:49 ucop2 /bsd: carp: carp4 demoted group carp by 1 to 130 (carpdev)
Jul 29 14:21:49 ucop2 /bsd: carp: carp5 demoted group carp by 1 to 131 (carpdev)
Jul 29 14:21:49 ucop2 /bsd: carp: pfsync0 demoted group carp by 1 to 132 
(pfsync bulk start)
Jul 29 14:21:49 ucop2 /bsd: carp: pfsync0 demoted group pfsync by 1 to 1 
(pfsync bulk start)
Jul 29 14:21:49 ucop2 /bsd: carp3: state transition: INIT -> BACKUP
Jul 29 14:21:49 ucop2 /bsd: carp: carp3 demoted group carp by -1 to 131 
(carpdev)
Jul 29 14:21:49 ucop2 /bsd: carp4: state transition: INIT -> BACKUP
Jul 29 14:21:49 ucop2 /bsd: carp: carp4 demoted group carp by -1 to 130 
(carpdev)
Jul 29 14:21:49 ucop2 /bsd: carp5: state transition: INIT -> BACKUP
Jul 29 14:21:49 ucop2 /bsd: carp: carp5 demoted group carp by -1 to 129 
(carpdev)
Jul 29 14:21:49 ucop2 /bsd: carp: pfsync0 demoted group carp by -1 to 128 
(pfsyncdev)
Jul 29 14:21:49 ucop2 /bsd: carp: pfsync0 demoted group pfsync by -1 to 0 
(pfsyncdev)

carp demote = 0

carp log on 5.3

Jul 29 13:51:01 ucop2 /bsd: carp1: state transition: INIT -> BACKUP
Jul 29 13:51:01 ucop2 /bsd: carp16: state transition: INIT -> BACKUP
Jul 29 13:51:01 ucop2 /bsd: carp2: state transition: INIT -> BACKUP
Jul 29 13:51:01 ucop2 /bsd: carp26: state transition: INIT -> BACKUP
Jul 29 13:51:01 ucop2 /bsd: carp26: state transition: BACKUP -> INIT
Jul 29 13:51:01 ucop2 /bsd: carp26: state transition: INIT -> BACKUP
Jul 29 13:51:01 ucop2 /bsd: carp: carp3 demoted group carp by 1 to 129 (carpdev)
Jul 29 13:51:01 ucop2 /bsd: carp: carp4 demoted group carp by 1 to 130 (carpdev)
Jul 29 13:51:01 ucop2 /bsd: carp: carp5 demoted group carp by 1 to 131 (carpdev)
Jul 29 13:51:01 ucop2 /bsd: carp: pfsync0 demoted group carp by 32 to 163 
(pfsync init)
Jul 29 13:51:01 ucop2 /bsd: carp: pfsync0 demoted group pfsync by 32 to 32 
(pfsync init)
Jul 29 13:51:01 ucop2 /bsd: carp: pfsync0 demoted group carp by 1 to 164 
(pfsync bulk start)
Jul 29 13:51:01 ucop2 /bsd: carp: pfsync0 demoted group pfsync by 1 to 33 
(pfsync bulk start)
Jul 29 13:51:01 ucop2 /bsd: carp3: state transition: INIT -> BACKUP
Jul 29 13:51:01 ucop2 /bsd: carp: carp3 demoted group carp by -1 to 163 
(carpdev)
Jul 29 13:51:01 ucop2 /bsd: carp4: state transition: INIT -> BACKUP
Jul 29 13:51:01 ucop2 /bsd: carp: carp4 demoted group carp by -1 to 162 
(carpdev)
Jul 29 13:51:01 ucop2 /bsd: carp5: state transition: INIT -> BACKUP
Jul 29 13:51:01 ucop2 /bsd: carp: carp5 demoted group carp by -1 to 161 
(carpdev)

carp demote  = 33

Reply via email to