Karl O. Pinc wrote:
I do recall some OpenBGP hooks into pf. Maybe there's a way to use these to make failover work.
You need BGP pure and simple. The only caveat with BGP on OpenBSD is that you cannot do equal cost load balancing. For instance, if your providers send you a default route, you can only install 1 of those routes in the routing table (due to the current multipath route limitation in OpenBSD). All this means though is that all traffic being routed to the default route will use one pipe instead of both (i.e., one pipe will most likely be much less used than the other). For most people this is a non-issue.
The ins and outs of setting BGP up is beyond what can be described in this thread and that's why I recommended a good book right from the start :)
.joel
