pf  

carp+pfsync, keep state doesn't work

Andrew Kozichev
Mon, 16 Jan 2006 05:03:35 -0800

Hi, i have such problem.

I am using carp balancing on the gate to the Internet.
preempt=1
arpabalance=1

Firstly, on 3.8 arpbalansing didn`t work.
I saw this article 
http://www.isi.qut.edu.au/people/mbradfor/openbsd-carp-arpbalance.html
I recompile the kernel with a patch "IP-Based
Balancing".
Now balancing works fine.

But i have problem with my pf rules with "keep state".

When connection goes from my localnet to external part
of my network in internet across carp-claster, rules
with "keep state" works wrong.

When i paste in pf.conf on both mashines
pass from $local_net to $external keep state

Connections established but after few seconds it
dropes.

When i replace this rule:

pass from $local_net to $external
pass from $external to $local_net

All works fine.

or

When i turn off one of the carp-servers all works fine
too. 



2. In my /var/log/messages, I have messages 
duplicate IP address x.y.z.k sent from ethernet
address 00:00:5e:00:01:04
duplicate IP address a.b.c.d sent from ethernet
address 00:00:5e:00:01:02
duplicate IP address a.b.c.d sent from ethernet
address 00:00:5e:00:01:02
duplicate IP address x.y.z.k sent from ethernet
address 00:00:5e:00:01:04

My problem looks like problem in this thread 
http://www.benzedrine.cx/pf/msg05190.html
But I am using obsd-3.8 stable.














        

        
                
________________________________________________________
Вы уже с Yahoo!? 
Испытайте обновленную и улучшенную. Yahoo! Почту! http://ru.mail.yahoo.com
  • carp+pfsync, keep state doesn't work Andrew Kozichev