Re: HA / load balancing / fail-over using CARP

2015-06-23 Thread Aviolat Romain
lat Romain; 'misc@openbsd.org' (misc@openbsd.org) Subject: Re: HA / load balancing / fail-over using CARP Hi, You can already do active-active CARP with OpenBSD. I believe it hashes by the MAC address (the MAC hash dictates which firewall responds to an ARP for the gateway IP). However you

Re: HA / load balancing / fail-over using CARP

2015-06-23 Thread Andy Lemin
mardi 23 juin 2015 11:25 > To: Romain FABBRI > Cc: Aviolat Romain; 'misc@openbsd.org' (misc@openbsd.org) > Subject: Re: HA / load balancing / fail-over using CARP > > Hi, You can already do active-active CARP with OpenBSD. I believe it hashes by the MAC address (the MAC hash di

Re: HA / load balancing / fail-over using CARP

2015-06-23 Thread Andy Lemin
Hi, You can already do active-active CARP with OpenBSD. I believe it hashes by the MAC address (the MAC hash dictates which firewall responds to an ARP for the gateway IP). However you may have issues with states and state synchronisation depending on the pps and firewall hardware performance, mea

Re: HA / load balancing / fail-over using CARP

2015-06-22 Thread Romain FABBRI
Not sure you really want to do that but you could achieve some IP or MAC Load Balancing using this kind of setup : http://www.kernel-panic.it/openbsd/carp/carp4.html -Message d'origine- De : owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] De la part de Aviolat Romain Envoyé : lun

Re: HA / load balancing / fail-over using CARP

2015-06-22 Thread Janne Johansson
Well, if one falls over unexpectedly, you would actually want one box to be able to handle the full load, otherwise when the HA kicks in (due to planned or unplanned downtime), you would get a poor or useless situation depending on how the services handle the downgrade. It smells like people who r