I can't speak to their other platforms, but the Private Cloud offering is based on VMware, and does not permit the use of MAC addresses other than the one assigned to the VM. So CARP immediately fails there. Amusingly (not), there's even special plug-in in the VMware client that is supposed to let me enable "OVH CARP" (it appears its function is to toggle the VMware distributed vSwitch setting allowing "forged" MAC addresses and promiscuous mode) but it doesn't actually work as it relies on the cluster being connected to a Cisco Nexus 1000v vSwitch, which OVH appears to have deprecated and removed. So, in any case, anything that requires MAC address changes won't work. -Adam
> -----Original Message----- > From: List [mailto:[email protected]] On Behalf Of Olivier > Mascia > Sent: August 2, 2017 02:31 > To: pfSense Support and Discussion Mailing List <[email protected]> > Subject: Re: [pfSense] IPv6 problem at OVH > > > Le 2 août 2017 à 00:39, Matthew Hall <[email protected]> a > écrit : > > > >> The real issue is that HA setup of a couple of pfSense is impossible > >> with such an awkward IPv6 setup as OVH imposes to us. > > > > Just curious: how does it break CARP + pfSync? > > I don't have the exact specifics in memory right now, but I'll see to dust- > off some old notes. I remember it was inextricable. But could be a bug in > VRRP implementation on OVH side and nothing to do with the way they > (don't) route the IPs (as CARP + pfSync works fine on IPv4 on the same > platform and the way they deliver IPv4). > > Without those notes, the most specific I remember is that packets were > coming in randomly on the master (processing them) and the slave > (properly ignoring them). Just as if the same MAC was seen on both on > their OVH side. > > > -- > Best Regards, Meilleures salutations, Met vriendelijke groeten, Olivier > Mascia, http://integral.software > > > _______________________________________________ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold _______________________________________________ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
