Evgeny Yurchenko wrote: > Yesterday it happened twice on one of my production firewalls. CPU load > was less than 10%. Did not pay attention at the moment but accoring to > RRD number of states was not unusual - 4-5k. I reproduced it in my lab - > only test connection, so number of states was less than 100.
When this happens, check the output of "ifconfig -a" on the master when it won't take back over, see what advskew it is advertising. There are certain failure states that cause it to set an advskew of 240 regardless of what it is actually configured to be. Figuring out what caused that, however, can be a bit trickier. I push quite a lot of traffic through my pfSense boxes and have never seen them failover in this manner. Nightly backups push just about wire speed through my CARP pair (100MBit). --------------------------------------------------------------------- To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
