Re: Problems with Sticky-Address Not Sticking with Hoststated

2008-01-25 Thread David Goldsmith
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Joerg Zinke wrote: | Hi David, | |> rdr on $int_if proto tcp from any to $webserver port $webports -> \ |> ~ round-robin sticky-address | | ^^^ I think the second rule is not needed if hoststated is running. | AFAIK this second rule will never

Re: Problems with Sticky-Address Not Sticking with Hoststated

2008-01-25 Thread Joerg Zinke
Hi David, On Fri, 25 Jan 2008 13:24:25 -0500 David Goldsmith <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > We have two firewalls running OpenBSD 4.2 with PF and CARP. We have > two web servers that we want to load balance traffic between and have > clients sta

Re: Problems with Sticky-Address Not Sticking with Hoststated

2008-01-25 Thread Rami Sik
uary 25, 2008 10:24 AM To: misc@openbsd.org Subject: Problems with Sticky-Address Not Sticking with Hoststated -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 We have two firewalls running OpenBSD 4.2 with PF and CARP. We have two web servers that we want to load balance traffic between and have

Problems with Sticky-Address Not Sticking with Hoststated

2008-01-25 Thread David Goldsmith
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 We have two firewalls running OpenBSD 4.2 with PF and CARP. We have two web servers that we want to load balance traffic between and have clients stay connected to one server as long as that server is up. Our /etc/pf.conf and /etc/hoststated.conf fi